CVE-2026-48558 CISA KEV · Actively exploitedSuited to automated attack · CISA
SimpleHelp Authentication Bypass via Missing OIDC JWT Signature Verification
CVSS score
9.5
EPSS probability
%5.7
Risk score
1.1
Published
4 mo ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
Nuclei: SimpleHelp <=5.5.15 - OIDC JWT Authentication Bypass
Makefile Go / Python
Similar Vulnerabilities
7.5
CVE-2024-57727 Actively exploitedVulnerability in N/a
Patch status unknown Public Exploits:2EPSS %97
9.9
CVE-2024-57726 Actively exploitedMissing authorization in N/a
Workaround Public Exploits:1EPSS %67
7.2
CVE-2024-57728 Actively exploitedPath traversal in N/a
Workaround Public Exploits:1EPSS %65
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-48558"