ShippethEthereum releases, writing, news and network upgrades
Everything3Releases0Articles0Advisories3

Security advisories of the clients, exploited vulnerabilities in the software and hardware node operators run, and incidents at certificate authorities.

Network upgradeNothing scheduled. Glamsterdam is on devnet 11

Security advisories and exploited vulnerabilities

Showing only SimpleHelp. Show everything

3 items match, 0 of them low signal.

Top of this filter

Items with a reason of their own, ranked by urgency, weight and how often the project publishes
SimpleHelpRemote Access·Security CVE-2026-48558 CVE published

SimpleHelp Authentication Bypass Vulnerability (opens in a new tab)

SimpleHelp contains an authentication bypass vulnerability in the OIDC authentication flow. When OIDC authentication is configured, identity tokens submitted during login are accepted without verifying their cryptographic signature.CISA KEV catalog
SimpleHelpRemote Access·Security CVE-2024-57726 CVE published Known ransomware use Known

SimpleHelp Missing Authorization Vulnerability (opens in a new tab)

SimpleHelp contains a missing authorization vulnerability that could allow low-privileged technicians to create API keys with excessive permissions. These API keys can be used to escalate privileges to the server admin role.CISA KEV catalog

The stream

Newest first
Mon 29 June
SimpleHelp Authentication Bypass Vulnerability (opens in a new tab) · SimpleHelp Security CVE-2026-48558 CVE published
Fri 24 April
SimpleHelp Missing Authorization Vulnerability (opens in a new tab) · SimpleHelp Security CVE-2024-57726 CVE published
Fri 24 April
SimpleHelp Path Traversal Vulnerability (opens in a new tab) · SimpleHelp Security CVE-2024-57728 CVE published