Vendor

SimpleHelp

As of , 4 SimpleHelp vulnerabilities are on CISA's list of exploited vulnerabilities, 3 of them used in ransomware campaigns; 3 were added in 2026. Patch first: CVE-2024-57726.

Patch first

Patch first
#VulnerabilityProductOur groupListedDeadlineEPSS
1CVE-2024-57726Missing AuthorizationSimpleHelp SimpleHelpPatch nowRansomware use, listed within a year0.67
2CVE-2024-57728Path TraversalSimpleHelp SimpleHelpPatch nowRansomware use, listed within a year0.65
3CVE-2024-57727Path TraversalSimpleHelp SimpleHelpPatch this weekRansomware use; Metasploit module; EPSS 0.970.97
4CVE-2026-48558Authentication BypassSimpleHelp SimpleHelpPatch this weekMetasploit module0.06

Added each year

1232025: 1120252026: 332026
Entries CISA added each year, removed ones included. Source: CISA KEV.
Show the numbers
Periodentries added
20251
20263

Used in ransomware

Changes CISA made to these entries

  1. CVE-2024-57728 SimpleHelpRansomware use: Unknown to Known.
  2. CVE-2024-57726 SimpleHelpRansomware use: Unknown to Known.
  3. CVE-2024-57727 SimpleHelpEdited: notes.
  4. CVE-2024-57727 SimpleHelpRansomware use: Unknown to Known.
  5. CVE-2024-57727 SimpleHelpEdited: notes.

Every change we recorded