Authentication Bypass in Remote Support Tools and libssh2 Flaw
Authentication Bypass in Remote Support Tools and libssh2 Flaw
On 29 June 2026, CISA added CVE-2026-48558 to its Known Exploited Vulnerabilities catalogue, confirming active exploitation of an authentication bypass in SimpleHelp remote support software. The flaw allows attackers to forge identity tokens and gain full technician access without credentials or multi-factor authentication. Because the vulnerability exists in IT providers’ infrastructure rather than client systems, UK small businesses face supply chain risk they cannot directly patch or monitor. Separately, CVE-2026-55200, a…
The skinny
The skinny isn't ready yet — notes appear once the transcript is processed.