CVE-2024-57728

CWE-59

High

87.9

RPS

Description

SimpleHelp remote support software v5.5.7 and before allows admin users to upload arbitrary files anywhere on the file system by uploading a crafted zip file (i.e. zip slip). This can be exploited to execute arbitrary code on the host in the context of the SimpleHelp server user.

Source: NVD

CVSS: 7.2; High · v3.1
EPSS: 64.66%; Probability of exploitation in the next 30 days (FIRST)
CISA KEV: In CISA KEV since Apr 2026
Fix commit: No known fix commit; Sources: MoreFixes, FreshFixes
Weakness: CWE-59; CWE-59, CWE-22
Published: 15 Jan 2025; Last modified 24 Apr 2026

How to read these signals: RPS · EPSS · CISA KEV · Data sources

Get this score from the API

curl -H "Authorization: Bearer dsec_live_xxxxxxxx" \
  https://api.intelligence.devsecure.io/api/v1/rps/CVE-2024-57728

Replace the placeholder with your key. Get a free API key or rank your own CVEs.

Data as of 7 Oct 2026, 05:16 UK time

CVE-2024-57728

Description

Signals

Get this score from the API