CVE-2024-57728 is a SimpleHelp path traversal vulnerability that CISA has added to its Known Exploited Vulnerabilities catalog, which means defenders should treat it as an urgent remediation item. The supplied record does not include a CVSS score, so exposure and KEV status should drive response priority.
CVE-2024-57726 is a SimpleHelp missing authorization vulnerability that CISA added to the Known Exploited Vulnerabilities catalog on 2026-04-24. KEV inclusion means CISA considers this vulnerability to be known exploited, so affected environments should treat remediation as urgent. CISA’s guidance in the provided record is to apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance [truncated]
CVE-2024-57727 is a SimpleHelp path traversal vulnerability that CISA added to its Known Exploited Vulnerabilities catalog on 2025-02-13. The KEV listing also marks it as associated with known ransomware campaign use. Because CISA directs organizations to apply vendor mitigations or discontinue use of the product if mitigations are unavailable, this should be treated as an urgent exposure for any environm [truncated]