
CISA Adds Actively Exploited SimpleHelp Authentication Bypass Flaw to KEV Catalog
The Cybersecurity and Infrastructure Security Agency (CISA) has added a critical authentication bypass vulnerability affecting SimpleHelp remote support software to its Known Exploited Vulnerabilities (KEV) catalog, confirming active exploitation in the wild. The flaw, tracked as CVE-2026-48558, was added on June 29, 2026, with a remediation deadline of July 2, 2026, giving federal agencies and […]
The post CISA Adds Actively Exploited SimpleHelp Authentication Bypass Flaw to KEV Catalog appeared first on Cyber Security News.