// tag

SmarterMail

Security incidents tagged SmarterMail. Newest first.

## 2 SmarterMail incidents in the last year

through Oct 22, 2026

crit 4 · high 3 · med 2 · low 1 · upd ½severity-weighted: critical 4 · high 3 · medium 2 · low 1 · update ½lessmore

show 2 older incidents

Feb 5highSmarterTools SmarterMail: SmarterTools SmarterMail Missing Authentication for Critical Function Vulnerabilitypatched
› SmarterTools SmarterMail patched
SmarterTools SmarterMail contains a missing authentication for critical function vulnerability in the ConnectToHub API method. This could allow the attacker to point the SmarterMail instance to a malicious HTTP server which serves the malicious OS command and could lead to command execution. Added to CISA KEV on 2026-02-05.
open incident →CVE-2026-24423

Jan 26highSmarterTools SmarterMail: SmarterTools SmarterMail Unrestricted Upload of File with Dangerous Type Vulnerabilitypatched
› SmarterTools SmarterMail patched
SmarterTools SmarterMail contains an unrestricted upload of file with dangerous type vulnerability that could allow an unauthenticated attacker to upload arbitrary files to any location on the mail server, potentially enabling remote code execution. CISA added CVE-2025-52691, CVE-2026-23760 to the Known Exploited Vulnerabilities catalog on 2026-01-26 based on evidence of active exploitation.
open incident →CVE-2025-52691 · CVE-2026-23760