SimpleHelp bug lets hackers create rogue remote support accounts
Source Bleeping Computer
Mentioned vulnerabilities
Fixed in 6.0 : update affected systems when convenient.
Data as of 16 Jun 2026, 09:30 UTC
Rated by Threat Radar
- Patch
- Available – fixed in 6.0
What to do
AI-suggested
SimpleHelp has released official patches in versions 5.5.16 and 6.0RC2 that fix this vulnerability. Organizations should update to these versions immediately. If updating is not feasible, restricting technician login sources via IP-based allowlists can mitigate risk. Monitoring for suspicious new technician accounts and reviewing server logs for unauthorized registrations and configuration changes can help detect exploitation attempts.
Description
A vulnerability in the SimpleHelp remote management software allows unauthenticated attackers to create privileged technician accounts on servers using the OpenID Connect (OIDC) authentication protocol. [...]