vulnerability
Critical SimpleHelp Vulnerability Exploited for Malware Delivery
Critical
Summary
A critical vulnerability (CVE-2026-48558) in SimpleHelp RMM software allowed unauthorized access and subsequent malware deployment. The flaw, related to OpenID Connect authentication, enabled attackers to gain full technician sessions and execute commands on managed systems. This resulted in the deployment of TaskWeaver and Djinn Stealer malware, targeting sensitive information like cloud credentials and developer tools.
Summary written automatically in our own words from the original article, which belongs to its publisher and remains the reference. It may contain errors. Sources & data