Multiple Vulnerabilities in SimpleHelp RMM Could Allow for Arbitrary Code Execution

Multiple critical vulnerabilities in SimpleHelp RMM (CVE-2024-57727, CVE-2024-57728, CVE-2024-57726) allow unauthenticated path traversal to download sensitive files and configuration secrets, authenticated arbitrary file upload that can lead to remote code execution (or overwrite executables), and missing authorization checks that enable privilege escalation; chained exploitation can result in full server compromise and execution of arbitrary commands.