Leírás
Adott identitás igénylés esetén, a program nem vagy nem megfelelően igazolja vissza az igény valódiságát.
CVE-2026-48558
Alapadatok
Súlyosság
Kritikus
Publikálás dátuma
2026. 06. 12.
Érintett rendszerek
CWE
Érintett rendszerek és verzióik
SimpleHelp SimpleHelp Server 5.5.x, < 5.5.16
SimpleHelp SimpleHelp Server 6.0 pre-release, < 6.0 RC2
SimpleHelp SimpleHelp Server 6.0 pre-release, < 6.0 RC2
Hivatkozások
NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-48558
CVE.org: https://www.cve.org/CVERecord?id=CVE-2026-48558
SimpleHelp Security Update: https://simple-help.com/security/simplehelp-security-update-2026-05
SimpleHelp Release News: https://simple-help.com/release-news
Horizon3.ai IOC/advisory: https://horizon3.ai/attack-research/disclosures/cve-2026-48558-simplehelp-authentication-bypass-iocs/
Arctic Wolf elemzés: https://arcticwolf.com/resources/blog/cve-2026-48558-critical-authentication-bypass-vulnerability-in-simplehelp-rmm-exploited-for-credential-theft-and-malware-delivery/
GitHub Advisory: https://github.com/advisories/GHSA-m93h-gjv2-fmq2
CVE.org: https://www.cve.org/CVERecord?id=CVE-2026-48558
SimpleHelp Security Update: https://simple-help.com/security/simplehelp-security-update-2026-05
SimpleHelp Release News: https://simple-help.com/release-news
Horizon3.ai IOC/advisory: https://horizon3.ai/attack-research/disclosures/cve-2026-48558-simplehelp-authentication-bypass-iocs/
Arctic Wolf elemzés: https://arcticwolf.com/resources/blog/cve-2026-48558-critical-authentication-bypass-vulnerability-in-simplehelp-rmm-exploited-for-credential-theft-and-malware-delivery/
GitHub Advisory: https://github.com/advisories/GHSA-m93h-gjv2-fmq2