{
  "site": "https://pwn.watch",
  "generatedAt": "2026-10-22T19:58:23.236Z",
  "tag": {
    "id": "simplehelp",
    "label": "SimpleHelp",
    "isStack": false,
    "url": "https://pwn.watch/t/simplehelp",
    "feed": "https://pwn.watch/t/simplehelp/feed.xml"
  },
  "counts": {
    "incidents": 1,
    "live": 0,
    "notFullyPatched": 0,
    "patched": 1
  },
  "incidents": [
    {
      "slug": "simplehelp-cve-2024-57727",
      "title": "SimpleHelp: Path Traversal Vulnerability",
      "url": "https://pwn.watch/i/simplehelp-cve-2024-57727",
      "json": "https://pwn.watch/i/simplehelp-cve-2024-57727.json",
      "status": "closed",
      "severity": "critical",
      "patchStatus": "patched",
      "product": "SimpleHelp",
      "tags": [
        "simplehelp",
        "ransomware",
        "cisa-kev"
      ],
      "cveIds": [
        "CVE-2024-57727"
      ],
      "affectedVersions": [
        "See vendor advisory / CISA notes (versions not always listed in KEV feed)"
      ],
      "fixedVersions": [
        "See vendor advisory linked in sources"
      ],
      "startedAt": "2025-02-13",
      "closedAt": "2025-02-13",
      "updatedAt": "2025-02-13",
      "summary": "SimpleHelp remote support software contains multiple path traversal vulnerabilities that allow unauthenticated remote attackers to download arbitrary files from the SimpleHelp host via crafted HTTP requests. These files may include server configuration files and hashed user passwords. Added to CISA KEV on 2025-02-13.",
      "xPost": null
    }
  ],
  "posts": [],
  "changes": [
    {
      "incident": "simplehelp-cve-2024-57727",
      "incidentTitle": "SimpleHelp: Path Traversal Vulnerability",
      "severity": "critical",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2025-02-13",
      "title": "CISA added CVE-2024-57727 to the KEV catalog (due 2025-03-06).",
      "body": null,
      "sourceUrl": null,
      "url": "https://pwn.watch/i/simplehelp-cve-2024-57727"
    }
  ]
}