Threat intelligence / Vulnerability
CVE-2024-57726
SimpleHelp contains a missing authorization vulnerability that could allow low-privileged technicians to create API keys with excessive permissions. These API keys can be used to escalate privileges to the server admin role.
Vulnerability
TypeVulnerability
External ID—
First seen2026-04-24
Last seen2026-04-24
Confidence
—
SimpleHelp contains a missing authorization vulnerability that could allow low-privileged technicians to create API keys with excessive permissions. These API keys can be used to escalate privileges to the server admin role.
Labels
CISA KEV context
Vendor / productSimpleHelp SimpleHelp
Added2026-04-24
Due date2026-05-08
2 recorded
Relationships
2 external