← Database

CVE-2024-57726

CRITICAL CVSS: 9.9 Published: 2025-01-15 Modified: 2026-06-17

Description

SimpleHelp remote support software v5.5.7 and before has a vulnerability that allows low-privileges technicians to create API keys with excessive permissions. These API keys can be used to escalate privileges to the server admin role.

Affected Platforms

Simple-Help Simplehelp

Weakness Type

NVD-CWE-noinfo, CWE-862

References