Back Foro3D

CISA warns of four active flaws in SimpleHelp, Samsung and D-Link

Foro3D • April 26, 2026

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added four vulnerabilities to its KEV catalog due to active exploitation. The flaws affect SimpleHelp, Samsung MagicINFO 9 Server, and D-Link DIR-823X routers. Notable is CVE-2024-57726, with a CVSS of 9.9, due to a lack of authorization that allows arbitrary code execution .

The critical flaw in SimpleHelp (CVE-2024-57726) allows unauthenticated attackers to execute remote commands without restrictions. Samsung MagicINFO 9 Server presents a command injection issue, while D-Link DIR-823X routers have a buffer overflow vulnerability. CISA recommends patching immediately or suspending use of these products until available updates are applied.

Another week, another list of flaws that attackers are already using like new toys. If you have a D-Link router at , maybe it's time to ask if it's feeling okay or if it's already in zombie mode. The worst part isn't the CVSS of 9.9, but the poker face of manufacturers when you tell them the update has been ready for months.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

CISA Alerts on Critical Flaws in SimpleHelp, Samsung MagicINFO, and D-Link Devices On April 24, 2026, CISA added four actively exploited vulnerabilities to its Known Exploited Vulnerabilities catalog. The affected products include SimpleHelp remote management software, Samsung MagicINFO 9 Server, and D-Link DIR-823X routers. The most critical flaw, CVE-2024-57726, has a CVSS score of 9.9 and allows low-privileged users to escalate privileges to server admin without additional authentication. This vulnerability is being exploited by the DragonForce ransomware operation, which uses it to deploy ransomware across managed devices. Additionally, Samsung's MagicINFO has a command injection vulnerability, and D-Link routers are affected by a buffer overflow. CISA has mandated that federal agencies must patch or discontinue use of these products by May 8, 2026. Organizations using these systems are urged to take immediate action to mitigate risks associated with these vulnerabilities. 3 sources 78

Extracted Entities

CISA warns of four active flaws in SimpleHelp, Samsung and D-Link

The full story

Extracted Entities

Attack Types (1)

CVEs (1)

CWE Weaknesses (3)

MITRE ATT&CK (1)

Platforms (2)

Tools (1)