Skip to content
Sign in

SimpleHelp product

Several products

Alert
No CISA KEV deadline is open. CISA last added a Several products CVE on 29 Jun.

Tracked since 24 Apr · latest article 23 Oct · RSS · API

0Open KEV deadlines

None open

0Added to KEV · 90 days

of 4 in the full CISA catalogue · all time

0High exploit odds · current

EPSS top 5%, not in KEV

0Articles · 7 days

none this week

Exploited, by due date4

Several products CVEs in CISA KEV with their federal deadlines. None is open.

Exploited Several products CVEs
CVEProductAddedFederal deadlineArticles
In CISA KEVCVE-2026-48558SimpleHelp29 JunPassed 2 Jul11
In CISA KEVCVE-2024-57726RansomwareSimpleHelp24 AprPassed 8 May5
In CISA KEVCVE-2024-57728RansomwareSimpleHelp24 AprPassed 8 May5
In CISA KEVCVE-2024-57727RansomwareSimpleHelp13 FebPassed 6 Mar3
Vendor CSV of 4 entries for SimpleHelp All 4 vendor entries, including other products.

Patch cadence and exploit odds

How often CISA adds Several products CVEs, how many have a fix, and where their exploit odds sit.

Added to CISA KEV per quarter

1Q1 ’250Q2 ’250Q3 ’250Q4 ’250Q1 ’263Q2 ’260Q3 ’260Q4 ’26
Show as table
Added to CISA KEV per quarter
QuarterAdded
Q1 20251
Q2 20250
Q3 20250
Q4 20250
Q1 20260
Q2 20263
Q3 20260
Q4 20260

Fix listed

3 of 4 CVEs in coverage

1 CVE has no vendor fix recorded yet.

EPSS percentile of each CVE

One dot per CVE; a red diamond marks those in CISA KEV.

top 5%CVE-2024-57727: 99.9th percentile, in CISA KEVCVE-2026-48558: 99.6th percentile, in CISA KEVCVE-2024-57726: 99.3th percentile, in CISA KEVCVE-2024-57728: 99.2th percentile, in CISA KEV050100
Show as table
FIRST EPSS percentiles across CVEs in coverage
CVEEPSS percentile
CVE-2024-5772799.9
CVE-2026-4855899.6
CVE-2024-5772699.3
CVE-2024-5772899.2

Coverage21 articles · all time

The latest 21 articles naming Several products, in the shared story grammar.

Full timeline
Quiet for 10 dayslast report 23 Oct21 articles8 outlets

21 articles from 8 outlets since 24 Apr. Quiet since 23 Oct.

Now24 Apr11 Jun1823282619 Oct26First reportCISA · 24 Apr, 17:52Picked up againafter 7 weeks quiet
  • Fri 24 Apr, 17:52 UTC. CISA, first report. CISA warns of active SimpleHelp ZIP traversal flaw CVE-2024-57728. Cites a CVE in CISA KEV.
  • Fri 24 Apr, 17:54 UTC. CISA. CISA flags SimpleHelp bug letting techs become admins. Cites a CVE in CISA KEV.
  • Fri 24 Apr, 17:59 UTC. CISA. CISA flags SimpleHelp bug letting techs become admins. Cites a CVE in CISA KEV.
  • Fri 24 Apr, 17:59 UTC. CISA. CISA warns of active SimpleHelp ZIP traversal flaw CVE-2024-57728. Cites a CVE in CISA KEV.
  • Fri 24 Apr, 19:11 UTC. CISA. CISA Adds Four New KEV Flaws, Urges Immediate Patching. Cites a CVE in CISA KEV.
  • Sat 25 Apr, 06:30 UTC. The Hacker News, its first report on the story. CISA Adds 4 Exploited Flaws to KEV, Sets May 2026 Federal Deadline. Cites a CVE in CISA KEV.
  • Sat 25 Apr, 22:21 UTC. Security Affairs, its first report on the story. CISA Adds KEV Entries for Samsung, SimpleHelp, DLink Flaws. Cites a CVE in CISA KEV.
  • Sat 13 Jun, 04:17 UTC. SecurityOnline, its first report on the story. SimpleHelp bug lets attackers bypass login and take admin control. Cites a CVE in CISA KEV.
  • Mon 29 Jun, 22:28 UTC. Dark Reading, its first report on the story. Djinn malware exploits SimpleHelp flaw to steal AI credentials. Cites a CVE in CISA KEV.
  • Mon 29 Jun, 22:32 UTC. CISA. SimpleHelp Auth Bypass Flaw (CVE‑2026‑48558) Grants Tech Access. Cites a CVE in CISA KEV.
  • Tue 30 Jun, 02:30 UTC. SecurityOnline. SimpleHelp Authentication Bypass Exploited in the Wild to Deploy TaskWeaver and Djinn Stealer. Cites a CVE in CISA KEV.
  • Tue 30 Jun, 09:01 UTC. SecurityWeek, its first report on the story. CVE-2026-48558 SimpleHelp flaw lets attackers deploy malware. Cites a CVE in CISA KEV.
  • Tue 30 Jun, 10:44 UTC. SOCRadar, its first report on the story. SimpleHelp auth bypass lets hackers deploy Djinn Stealer. Cites a CVE in CISA KEV.
  • Tue 30 Jun, 12:02 UTC. The Hacker News. Attackers Exploit SimpleHelp CVE-2026-48558 to Deploy TaskWeaver and Djinn Stealer. Cites a CVE in CISA KEV.
  • Tue 30 Jun, 16:13 UTC. Infosecurity, its first report on the story. Critical SimpleHelp Vulnerability Exploited For Malware Delivery. Cites a CVE in CISA KEV.
  • Tue 30 Jun, 20:11 UTC. Security Affairs. U.S. CISA adds SimpleHelp flaw to its Known Exploited Vulnerabilities catalog. Cites a CVE in CISA KEV.
  • Wed 1 Jul, 09:21 UTC. SecurityOnline. Claude Code Telemetry Rollback: Anthropic Responds to Backdoor Allegations. Cites a CVE in CISA KEV.
  • Mon 6 Jul, 02:32 UTC. SecurityOnline. Weekly Threat Intelligence: The July 2026 Breaches. Cites a CVE in CISA KEV.
  • Tue 20 Oct, 11:56 UTC. SOCRadar. AI-Driven Ransomware Campaign Targeted 62 Organisations. Cites a CVE in CISA KEV.
  • Fri 23 Oct, 08:35 UTC. SecurityOnline. INC Ransomware Exposed Using AI and Custom Malware Against Victims. Cites a CVE in CISA KEV.
  • Fri 23 Oct, 18:36 UTC. The Hacker News. AI Agents Power Ransomware Affiliates’ Attacks on Edge Devices. Cites a CVE in CISA KEV.
  • Known exploited CVE
  • No CVE
  • Larger: an outlet’s first report
  • Square: official source
  • Coverage over time
  • Quiet time, folded
Show all 21 articles as a list
  1. Fri 24 AprDay 05
    1. CISA warns of active SimpleHelp ZIP traversal flaw CVE-2024-5772817:52 · CISA · official · First report · CISA alert · Known exploited CVE
    2. CISA flags SimpleHelp bug letting techs become admins17:54 · CISA · official · Known exploited CVE
    3. CISA flags SimpleHelp bug letting techs become admins17:59 · CISA · official · Known exploited CVE
    Show 2 more from 24 Apr
    1. CISA warns of active SimpleHelp ZIP traversal flaw CVE-2024-5772817:59 · CISA · official · Known exploited CVE
    2. CISA Adds Four New KEV Flaws, Urges Immediate Patching19:11 · CISA · official · Known exploited CVE
  2. Sat 25 AprDay 12
    1. CISA Adds 4 Exploited Flaws to KEV, Sets May 2026 Federal Deadline06:30 · The Hacker News · Known exploited CVE
    2. CISA Adds KEV Entries for Samsung, SimpleHelp, DLink Flaws22:21 · Security Affairs · Known exploited CVE

  3. Quiet for 7 weeks

    Sat 13 JunDay 501
    1. SimpleHelp bug lets attackers bypass login and take admin control04:17 · SecurityOnline · Picked up again · Known exploited CVE

  4. Quiet for 2 weeks

    Mon 29 JunDay 662
    1. Djinn malware exploits SimpleHelp flaw to steal AI credentials22:28 · Dark Reading · Picked up again · Known exploited CVE
    2. SimpleHelp Auth Bypass Flaw (CVE‑2026‑48558) Grants Tech Access22:32 · CISA · official · Known exploited CVE
  5. Tue 30 JunDay 676
    1. SimpleHelp Authentication Bypass Exploited in the Wild to Deploy TaskWeaver and Djinn Stealer02:30 · SecurityOnline · Known exploited CVE
    2. CVE-2026-48558 SimpleHelp flaw lets attackers deploy malware09:01 · SecurityWeek · Known exploited CVE
    3. SimpleHelp auth bypass lets hackers deploy Djinn Stealer10:44 · SOCRadar · Known exploited CVE
    Show 3 more from 30 Jun
    1. Attackers Exploit SimpleHelp CVE-2026-48558 to Deploy TaskWeaver and Djinn Stealer12:02 · The Hacker News · Known exploited CVE
    2. Critical SimpleHelp Vulnerability Exploited For Malware Delivery16:13 · Infosecurity · Known exploited CVE
    3. U.S. CISA adds SimpleHelp flaw to its Known Exploited Vulnerabilities catalog20:11 · Security Affairs · Known exploited CVE
  6. Wed 1 JulDay 681
    1. Claude Code Telemetry Rollback: Anthropic Responds to Backdoor Allegations09:21 · SecurityOnline · Known exploited CVE

  7. Quiet for 5 days

    Mon 6 JulDay 731
    1. Weekly Threat Intelligence: The July 2026 Breaches02:32 · SecurityOnline · Picked up again · Known exploited CVE

  8. Quiet for 15 weeks

    Tue 20 OctDay 1791
    1. AI-Driven Ransomware Campaign Targeted 62 Organisations11:56 · SOCRadar · Picked up again · Known exploited CVE

  9. Quiet for 3 days

    Fri 23 OctDay 1822
    1. INC Ransomware Exposed Using AI and Custom Malware Against Victims08:35 · SecurityOnline · Picked up again · Known exploited CVE
    2. AI Agents Power Ransomware Affiliates’ Attacks on Edge Devices18:36 · The Hacker News · Known exploited CVE

All CVEs in coverage4

Exploited first, then by EPSS

In the CVE tracker
  • CVE-2024-57727Exploited

    SimpleHelp Path Traversal Vulnerability

    9.1Critical97% EPSS · 3 articles
  • CVE-2026-48558Exploited

    SimpleHelp Authentication Bypass Vulnerability

    10.0Critical78% EPSS · 11 articles
  • CVE-2024-57726Exploited

    SimpleHelp Missing Authorization Vulnerability

    9.9Critical66% EPSS · 5 articles
  • CVE-2024-57728Exploited

    SimpleHelp Path Traversal Vulnerability

    7.2High64% EPSS · 5 articles
CyberSIXTSignal over noise
Updated AboutDevelopersSign in