Vulnerability intelligence
CVE-2024-57727
SimpleHelp Path Traversal Vulnerability
SimpleHelp SimpleHelp
SimpleHelp remote support software contains multiple path traversal vulnerabilities that allow unauthenticated remote attackers to download arbitrary files from the SimpleHelp host via crafted HTTP requests. These files may include server configuration files and hashed user passwords.
CVSS Score
9.1
Critical
EPSS — Exploit Probability
—
Awaiting FIRST.org data
Exploitation
Confirmed in the wild
Used in ransomware campaigns
Remediation
unknown
Federal deadline 2025-03-06
CISA required action
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable. Deadline for federal agencies: 2025-03-06.
1 article across 1 outlet · first covered Oct 20, 2026 · latest Oct 20, 2026
Associated threat actors
Coverage timeline
-
AI-Driven Ransomware Campaign Targeted 62 Organisationssocradar.io · Oct 20, 2026