/Vulnerability Library

SimpleHelp <=5.5.15 - OIDC JWT Authentication Bypass

CVE-2026-48558
Verified

Description

SimpleHelp <= 5.5.15 and 6.0 pre-release contain an authentication bypass caused by lack of cryptographic signature verification in OIDC tokens, letting remote unauthenticated attackers gain technician sessions, exploit requires OIDC authentication configured.

Severity

Critical

CVSS Score

10

Exploit Probability

78%

Affected Product

simplehelp

Published Date

September 4, 2026

Template Author

0x_akoko, pdteam

CVE-2026-48558.yaml
10.0Score

CVSS Metrics

CVSS Vector:
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
CVE ID:
cve-2026-48558
CWE ID:
cwe-347

References

https://horizon3.ai/attack-research/disclosures/cve-2026-48558-simplehelp-authentication-bypass-iocs/https://simple-help.com/security/simplehelp-security-update-2026-05https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/simplehelp_oidc_auth_bypass_rce.rbhttps://github.com/J4ck3LSyN-Gen2/CVE-2026-48558https://nvd.nist.gov/vuln/detail/CVE-2026-48558https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-48558

Remediation Steps

Update to a version later than 5.5.15 or the final 6.0 release.