CVE-2026-48558: SimpleHelp OIDC Auth Bypass Used to Deploy Infostealer Payloads
By
ameer
8d agoen
Source
SOCRadarCVE-2026-48558: SimpleHelp OIDC Auth Bypass Used to Deploy Infostealer Payloadssocradar.ioCVE-2026-48558: SimpleHelp OIDC Auth Bypass Used to Deploy Infostealer Payloads CVE-2026-48558 is a critical authentication bypass affecting SimpleHelp, a remote support and RMM (remote monitoring and management) platfor
You might also wanna read
Attackers Exploit SimpleHelp CVE-2026-48558 to Deploy TaskWeaver and Djinn Stealer
thehackernews.com·8d ago
Critical SimpleHelp Vulnerability (CVE-2026-48558) Enables Malware Delivery via Forged Authentication Tokens
A critical vulnerability (CVE-2026-48558) with a CVSS score of 10 has been discovered in SimpleHelp's OpenID Connect authentication flow. Th
briefly.co·8d ago
'Djinn' Infostealer Campaign Exploits SimpleHelp RMM Vulnerability to Target Cloud and AI Credentials
A recent intrusion campaign exploited CVE-2026-48558, a critical authentication bypass vulnerability in SimpleHelp (an RMM platform used by
darkreading.com·3d ago
CVE-2026-56073: Authentication Bypass Vulnerability in Cap-go OTP Verification
A security vulnerability (CVE-2026-56073) has been identified in Cap-go versions before 12.128.2, involving an authentication bypass in OTP
nvd.nist.gov·18d ago
CVE-2025-29927 Authorization Bypass in Next.js Middleware
Snyk·1y ago
Check Point Remote Access VPN IKEv1 Authentication Bypass (CVE-2026-50751) Technical Analysis
A security research blog from watchTowr Labs analyzing a critical authentication bypass vulnerability (CVE-2026-50751) in Check Point Remote
labs.watchtowr.com·26d ago
Comments
Sign in to join the conversation.
No comments yet. Be the first.