Security
Critical SimpleHelp bug exposes remote support servers
A critical vulnerability in SimpleHelp remote management software (CVE-2026-48558) allows unauthenticated attackers to create privileged technician accounts on servers with OIDC authentication enabled. The flaw affects versions 5.5.15 and older, with patches released June 9. Roughly 1,000 exposed servers may be vulnerable.