A Vulnerability in SimpleHelp Could Allow for Authentication Bypass

A vulnerability (CVE-2026-48558) in SimpleHelp's OpenID Connect (OIDC) authentication allows remote, unauthenticated attackers to submit forged tokens with arbitrary claims to create new "Technician" accounts, bypass multi-factor authentication, and gain full access to managed endpoints. The issue requires OIDC to be enabled, a TechnicianGroup associated with the OIDC provider, and "Allow group authenticated logins" enabled—conditions commonly present in deployments, enabling attackers to remote into systems, execute scripts, install programs, and access or delete data.