{"items":[{"id":"CVE-2026-48558","published":"2026-06-12T17:07:05.453Z","updated":"2026-10-07T19:26:16.974Z","title":"SimpleHelp Authentication Bypass via Missing OIDC JWT Signature Verification","severity":"CRITICAL","score":9.5,"vendor":"SimpleHelp","product":"SimpleHelp","kev":true,"epss":0.80786,"kevAdded":"2026-06-29","exploit":true},{"id":"CVE-2025-36728","published":"2025-07-25T16:42:03.612Z","updated":"2025-07-25T17:19:15.996Z","title":"SimpleHelp Cross Site Request Forgery","severity":"MEDIUM","score":6.3,"vendor":"Simplehelp","product":"Simplehelp","kev":false,"epss":0.00189,"kevAdded":null,"exploit":false},{"id":"CVE-2025-36727","published":"2025-07-25T16:37:51.633Z","updated":"2025-07-25T17:24:23.662Z","title":"SimpleHelp Inclusion of functionality from untrusted control sphere","severity":"HIGH","score":8.3,"vendor":"Simplehelp","product":"Simplehelp","kev":false,"epss":0.00486,"kevAdded":null,"exploit":false}]}