SimpleHelp <= 5.5.7 - Privilege Escalation
CVE-2024-57726
Verified
Description
SimpleHelp remote support software v5.5.7 and before contains a privilege escalation caused by insufficient access controls in API key creation, letting low-privileges technicians escalate privileges to server admin, exploit requires low-privileges technician access.
Severity
Critical
CVSS Score
9.9
Exploit Probability
67%
Affected Product
simplehelp
Published Date
August 12, 2026
Template Author
popy21
CVE-2024-57726.yaml
9.9Score
CVSS Metrics
CVSS Vector:
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
CVE ID:
cve-2024-57726
CWE ID:
cwe-862
References
https://simple-help.com/kb---security-vulnerabilities-01-2025#security-vulnerabilities-in-simplehelp-5-5-7-and-earlierhttps://www.horizon3.ai/attack-research/disclosures/critical-vulnerabilities-in-simplehelp-remote-support-software/https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-57726https://www.microsoft.com/en-us/security/blog/2026/04/06/storm-1175-focuses-gaze-on-vulnerable-web-facing-assets-in-high-tempo-medusa-ransomware-operations/https://www.trendmicro.com/vinfo/us/security/news/ransomware-spotlight/ransomware-spotlight-dragonforcehttps://nvd.nist.gov/vuln/detail/CVE-2024-57726
Remediation Steps
Update to the latest version of SimpleHelp that addresses this issue or apply the vendor's security patch.