SmarterTools

4 results · Clear filters · Feed

• High 7.2
  CVE-2026-104082 Public exploit

  SmarterMail < Build 9777 SysAdmin Remote Code Execution via Volume Mount

  SmarterMail before build 9777 contains a remote code execution vulnerability that allows an attacker holding a SysAdmin-scoped access token to bypass the Volume Mount script-directory containment control by provisioning a new mail domain with an arbitrary Fil…

  SmarterTools SmarterMail
  Oct 9, 2026
• Critical 9.3
  CVE-2026-24423 Exploited · Ransomware Public exploit EPSS 88%

  SmarterTools SmarterMail < Build 9511 Unauthenticated RCE via ConnectToHub API

  SmarterTools SmarterMail versions prior to build 9511 contain an unauthenticated remote code execution vulnerability in the ConnectToHub API method. The attacker could point the SmarterMail to the malicious HTTP server, which serves the malicious OS command. …

  SmarterTools SmarterMail
  Jan 23, 2026

  KEV Feb 5, 2026
• Critical 9.3
  CVE-2026-23760 Exploited · Ransomware Public exploit EPSS 96%

  SmarterTools SmarterMail < Build 9511 Authentication Bypass via Password Reset API

  SmarterTools SmarterMail versions prior to build 9511 contain an authentication bypass vulnerability in the password reset API. The force-reset-password endpoint permits anonymous requests and fails to verify the existing password or a reset token when resett…

  SmarterTools SmarterMail
  Jan 22, 2026

  KEV Jan 26, 2026
• Critical 10.0
  CVE-2025-52691 Exploited · Ransomware Public exploit EPSS 86%

  Upload Arbitrary Files

  Successful exploitation of the vulnerability could allow an unauthenticated attacker to upload arbitrary files to any location on the mail server, potentially enabling remote code execution.

  SmarterTools SmarterMail
  Dec 29, 2025

  KEV Jan 26, 2026