vulnerability
SimpleHelp bug lets hackers create rogue remote support accounts
Critical
Summary
A critical vulnerability (CVE-2026-48558) in SimpleHelp remote management software allows unauthorized users to create privileged technician accounts via OpenID Connect (OIDC) authentication. This flaw, combined with specific configuration settings, enables attackers to remotely manage systems without MFA, posing a significant risk to organizations. SimpleHelp has released patches to address the vulnerability, but proactive measures are recommended to mitigate potential exploitation.
Summary written automatically in our own words from the original article, which belongs to its publisher and remains the reference. It may contain errors. Sources & data