Skip to content
OpenAdvisories

Vendor

SmarterTools

15 known vulnerabilities.

Products

SmarterMail 10 SmarterTrack 4 SmarterTools SmarterTrack 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 9.3
    CVE-2026-24423 Exploited · Ransomware Public exploit Scanner template EPSS 88%

    SmarterTools SmarterMail < Build 9511 Unauthenticated RCE via ConnectToHub API

    SmarterTools SmarterMail versions prior to build 9511 contain an unauthenticated remote code execution vulnerability in the ConnectToHub API method. The attacker could point the SmarterMail to the malicious HTTP server, which serves the malicious OS command. …

    SmarterTools SmarterMail
    KEV Feb 5, 2026
  • Critical 9.3
    CVE-2026-23760 Exploited · Ransomware Public exploit Scanner template EPSS 96%

    SmarterTools SmarterMail < Build 9511 Authentication Bypass via Password Reset API

    SmarterTools SmarterMail versions prior to build 9511 contain an authentication bypass vulnerability in the password reset API. The force-reset-password endpoint permits anonymous requests and fails to verify the existing password or a reset token when resett…

    SmarterTools SmarterMail
    KEV Jan 26, 2026
  • Critical 10.0
    CVE-2025-52691 Exploited · Ransomware Public exploit Scanner template EPSS 86%

    Upload Arbitrary Files

    Successful exploitation of the vulnerability could allow an unauthenticated attacker to upload arbitrary files to any location on the mail server, potentially enabling remote code execution.

    SmarterTools SmarterMail
    KEV Jan 26, 2026