CVE-2026-48558: The RMM Vulnerability Putting Every MSP Client at Risk
CVE-2026-48558: The RMM Vulnerability Putting Every MSP Client at Risk
On 29 June 2026, CISA added CVE-2026-48558 to its Known Exploited Vulnerabilities catalogue. This CVSS 10.0 authentication bypass flaw in SimpleHelp, a widely deployed remote monitoring and management platform, allows attackers to create privileged technician accounts without credentials. Active exploitation campaigns have already deployed TaskWeaver persistent access malware and Djinn Stealer credential harvesting tools through compromised RMM servers. For UK small businesses, the risk is direct: if your managed service…
The skinny
The skinny isn't ready yet — notes appear once the transcript is processed.