Skip to content
OpenAdvisories

Archive

22 January 2026

Vulnerabilities first published on this day (UTC), newest first.

1 result · Clear filters · Feed

  • Critical 9.3
    CVE-2026-23760 Exploited · Ransomware Public exploit Scanner template EPSS 96%

    SmarterTools SmarterMail < Build 9511 Authentication Bypass via Password Reset API

    SmarterTools SmarterMail versions prior to build 9511 contain an authentication bypass vulnerability in the password reset API. The force-reset-password endpoint permits anonymous requests and fails to verify the existing password or a reset token when resett…

    KEV Jan 26, 2026