SecAlerts
simplehelp logo

simplehelp

Security Risk Profile

77
/100
high

Security Risk Score

Comprehensive risk assessment based on 11 vulnerabilities, EPSS scores, exploitation status, and remediation availability.

📅 Data spans from January 28, 2025 to present

11
Total CVEs
2
Critical+High
8
Exploited
2
Unpatched

Threat Assessment

Avg CVSS
8.8
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
2
Critical/High
Risk Level
77/100
high
⚠️ 8 Active Exploits

Severity Distribution

Critical
0
High
2
Medium
0
Low
0

Exploit Likelihood

>50% chance
0
20-50%
0
5-20%
0
<5%
0

Age Distribution

Common Weaknesses (CWE)

1
CSRF
1

Most Affected Products

1. SimpleHelp Remote Monitoring and Management6
2. SimpleHelp3
3. SimpleHelp RMM3
4. SimpleHelp remote management software2
5. Simple-help Simplehelp2

Recent Vulnerabilities

See more →
bleepingcomputer-20260615200652
unknown

SimpleHelp bug lets hackers create rogue remote support accounts

6/15/2026🔧 No Patch
CVE-2025-36728
CVSS 8.8high

SimpleHelp Cross Site Request Forgery

7/25/2025🔧 No Patch
CVE-2025-36727
CVSS 8.8high

SimpleHelp Inclusion of functionality from untrusted control sphere

7/25/2025🔧 No Patch
https://www.theregister.com/2025/06/04/play_ransomware_infects_900_victims/
unknown

Play ransomware crims exploit SimpleHelp flaw in double-extortion schemes

6/4/2025⚠ Exploited🔧 No Patch
https://www.theregister.com/2025/05/28/dragonforce_ransomware_gang_sets_fire/
unknown

DragonForce used MSP's RMM software to distribute ransomware

5/28/2025⚠ Exploited🔧 No Patch
https://www.bleepingcomputer.com/news/security/dragonforce-ransomware-abuses-msps-simplehelp-rmm-to-encrypt-customers/
unknown

DragonForce ransomware abuses MSP’s SimpleHelp RMM to encrypt customers

5/27/2025⚠ Exploited🔧 No Patch
https://www.bleepingcomputer.com/news/security/dragonforce-ransomware-abuses-simplehelp-in-msp-supply-chain-attack/
unknown

DragonForce ransomware abuses SimpleHelp in MSP supply chain attack

5/27/2025⚠ Exploited🔧 No Patch
https://www.bleepingcomputer.com/news/security/badpilot-network-hacking-campaign-fuels-russian-sandworm-attacks/
unknown

BadPilot network hacking campaign fuels Russian SandWorm attacks

2/12/2025⚠ Exploited🔧 No Patch
https://www.bleepingcomputer.com/news/security/simplehelp-rmm-flaws-exploited-to-breach-corporate-networks/
unknown

SimpleHelp RMM flaws exploited to breach corporate networks

2/6/2025⚠ Exploited🔧 No Patch
https://www.bleepingcomputer.com/news/security/hackers-exploit-simplehelp-rmm-flaws-to-deploy-sliver-malware/
unknown

Hackers exploit SimpleHelp RMM flaws to deploy Sliver malware

2/6/2025⚠ Exploited🔧 No Patch

Monitor simplehelp in Real-Time

Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.

Powered bySecAlerts

Monitor Your Software Stack in Real-Time

Get instant alerts when vulnerabilities are discovered in your software stack. Stay ahead of security threats with SecAlerts.

© 2026 SecAlerts Pty Ltd. All rights reserved.