Critical Actively exploited
CVE-2026-48558
SimpleHelp Authentication Bypass Vulnerability
What this means
- Weakness
- A cryptographic signature is not properly verified, so forged content passes as authentic.
- Likelihood
- Exploitation is not hypothetical: CISA has observed it in the wild.
What to doTop priority: CISA sets the remediation deadline at 2 July 2026.
Read automatically from the CVSS vector, the weakness type (CWE) and the EPSS score. The technical description above remains the one published by NIST.