CVE-2024-57726

CVE-2024-57726 is a critical vulnerability in SimpleHelp remote support software versions 5.5.7 and earlier, allowing low-privilege technicians to create API keys with excessive permissions, leading to server administrator privilege escalation. With a CVSS score of 9.9, this network-exploitable flaw has low attack complexity and can result in complete compromise of confidentiality, integrity, and availability. Although no public exploit code is available, the vulnerability is actively being exploited in the wild by ransomware groups like DragonForce and Play, as evidenced by significant community discussion and media coverage.