Vulnerability Intelligence

🛡 CVE-2024-57726

SimpleHelp Missing Authorization Vulnerability
SimpleHelp SimpleHelp CWE-862

Ransomware use

KNOWN
CISA KEV

EPSS

8.6%
Moderate · 95th pct

Added to KEV

2026-04-24
CISA

Remediate by

2026-05-08
⚠ OVERDUE

CWE

CWE-862
weakness
PIVOT🔍 Advanced Search🕵 OSINT Pivot🔗 Link Analysis🕑 Timeline📤 Export STIX/MISP

📈 EPSS exploit probability

8.6%
FIRST EPSS — 30-day probability of exploitation in the wild · band Moderate · higher than 95% of all scored CVEs

⚠ KEV remediation overdue

CISA required federal remediation by 2026-05-08. This exploited vulnerability is past its Binding Operational Directive 22-01 due date — prioritize patch/mitigation and hunt for exploitation.

📄 Description

SimpleHelp contains a missing authorization vulnerability that could allow low-privileged technicians to create API keys with excessive permissions. These API keys can be used to escalate privileges to the server admin role.

🏹 Attributed exploitation

Malware / ransomware (KEV): ransomware (KEV-flagged)

Malware pivots: 🦠 ransomware 🦠 ransomware (KEV-flagged)

🔗 External references & OSINT

NVD →CISA KEV →MITRE CVE →Exploit-DB →EPSS (FIRST) →VulnCheck →Tenable →CVE.org →GitHub PoC →Vulmon →

🔄 Internal pivots & actions

Search this CVE →Correlation graph →Generate detection rules →Timeline →Link analysis →Ransomware theater →

🛡 Add to case

Attach CVE-2024-57726 (Vulnerability / CVE) and pull all linked entities:

🗃 Data Management

+ Case+ CampaignWatchlistTagSave searchWhitelistExport STIX/MISPReport

🧩 Advanced Capabilities

Link AnalysisPivot ExplorerTimelineThreat HuntingAnalyticsDetection RulesBlockchainOSINT PivotPassive DNSTAXII 2.1MISP FeedCreate Alert RuleNetFlowCoverage & Gaps
Workstation · Copilot · AI Skills · Automation · Playbooks · Lookups · Docs · Reports

🤖 AI Copilot

⚡ AI Skills

All SkillsResolveEnrichCorrelateSummarize

🔍 Lookup & Enrich

EnrichmentsPivotLink Analysis

📚 Docs & Reports

DocumentationGenerate ReportAPIPlatforms Hub

💡 Recommendations

⚙ Automation

Operations Center

Cron: 0 * * * * php /home/zaptf0zdggll/public_html/threats/cron.php

📜 Playbook

Open Response Playbook

🔗 Related Tools

Mission CommandAdvanced SearchOperations Center