SimpleHelp Authentication Bypass Exploited to Hijack Remote Endpoints

Critical vulnerability CVE-2026-48558 in SimpleHelp allows unauthenticated attackers to forge OIDC identity tokens (due to missing signature verification) to obtain full technician/admin sessions and bypass MFA; threat intelligence reports ~14,000 internet-facing instances with ~7.2% in a vulnerable configuration, and recommended mitigations include immediate patching, restricting authentication IPs, and hardening the OIDC flow.