CVE-2026-48558 - Vulnerability Details

Related Threat Clusters

• Anonymous Researcher Publishes Zero-Day Exploits for Major Software Projects

  An anonymous researcher known as Bikini has released exploit code for over a dozen zero-day vulnerabilities affecting 15 popular open-source projects, including the Linux kernel and Libssh2. The exploits were disclosed…

  4 articles · Updated July 1, 2026
• Critical SimpleHelp Vulnerability Exploited for Malware Delivery

  A maximum-severity vulnerability in SimpleHelp's RMM software, tracked as CVE-2026-48558, has been exploited to deliver two new malware families: TaskWeaver and Djinn Stealer. The flaw allows unauthenticated attackers…

  3 articles · Updated June 30, 2026
• CISA Warns of Critical SimpleHelp Authentication Bypass Vulnerability

  The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has identified a critical authentication bypass vulnerability in SimpleHelp, tracked as CVE-2026-48558, which is actively being exploited. This flaw…

  2 articles · Updated July 2, 2026
• Critical RCE Vulnerability in BeyondTrust Software Requires Immediate Patching

  BeyondTrust has issued a warning regarding a critical remote code execution (RCE) vulnerability in its Remote Support and Privileged Remote Access software. The flaw, tracked as CVE-2026-1731, allows unauthenticated…

  1059 articles · Updated February 9, 2026

Recent Intelligence Reports

• CISA Warns of SimpleHelp Authentication Bypass Vulnerability Exploited in Attacks — Cybersecuritynews · July 2, 2026
• CISA Adds Actively Exploited SimpleHelp Vulnerability to KEV Catalog — Gbhackers · July 1, 2026
• Risky Bulletin: Researcher drops giant cache of zero — News.Risky.Biz · July 1, 2026
• Critical SimpleHelp Vulnerability Exploited For Malware Delivery — Infosecurity-Magazine · June 30, 2026
• Attack exploiting SimpleHelp vulnerability deploys novel loader, infostealer — Feeds.Feedburner · June 30, 2026
• SimpleHelp vulnerability allows unauthenticated attackers to create privileged accounts — Feeds.Feedburner · June 16, 2026
• SimpleHelp RMM flaw could give attackers full access to managed endpoints (CVE-2026-48558) — Feeds2.Feedburner · June 16, 2026
• Nearly 14,000 SimpleHelp Servers Exposed Amid Critical Authentication Bypass Disclosure — Cybersecuritynews · June 16, 2026

Related Entities