{
  "site": "https://pwn.watch",
  "generatedAt": "2026-10-22T16:53:33.742Z",
  "tag": {
    "id": "smartermail",
    "label": "SmarterMail",
    "isStack": false,
    "url": "https://pwn.watch/t/smartermail",
    "feed": "https://pwn.watch/t/smartermail/feed.xml"
  },
  "counts": {
    "incidents": 2,
    "live": 0,
    "notFullyPatched": 0,
    "patched": 2
  },
  "incidents": [
    {
      "slug": "smartertools-smartermail-cve-2026-24423",
      "title": "SmarterTools SmarterMail: SmarterTools SmarterMail Missing Authentication for Critical Function Vulnerability",
      "url": "https://pwn.watch/i/smartertools-smartermail-cve-2026-24423",
      "json": "https://pwn.watch/i/smartertools-smartermail-cve-2026-24423.json",
      "status": "closed",
      "severity": "high",
      "patchStatus": "patched",
      "product": "SmarterTools SmarterMail",
      "tags": [
        "smartermail",
        "ransomware",
        "cisa-kev",
        "auth-bypass"
      ],
      "cveIds": [
        "CVE-2026-24423"
      ],
      "affectedVersions": [
        "See vendor advisory / CISA notes (versions not always listed in KEV feed)"
      ],
      "fixedVersions": [
        "See vendor advisory linked in sources"
      ],
      "startedAt": "2026-02-05",
      "closedAt": "2026-02-05",
      "updatedAt": "2026-02-05",
      "summary": "SmarterTools SmarterMail contains a missing authentication for critical function vulnerability in the ConnectToHub API method. This could allow the attacker to point the SmarterMail instance to a malicious HTTP server which serves the malicious OS command and could lead to command execution. Added to CISA KEV on 2026-02-05.",
      "xPost": null
    },
    {
      "slug": "smartertools-smartermail-cve-2025-52691",
      "title": "SmarterTools SmarterMail: SmarterTools SmarterMail Unrestricted Upload of File with Dangerous Type Vulnerability",
      "url": "https://pwn.watch/i/smartertools-smartermail-cve-2025-52691",
      "json": "https://pwn.watch/i/smartertools-smartermail-cve-2025-52691.json",
      "status": "closed",
      "severity": "high",
      "patchStatus": "patched",
      "product": "SmarterTools SmarterMail",
      "tags": [
        "smartermail",
        "ransomware",
        "cisa-kev",
        "rce"
      ],
      "cveIds": [
        "CVE-2025-52691",
        "CVE-2026-23760"
      ],
      "affectedVersions": [
        "See vendor advisory / CISA notes (versions not always listed in KEV feed)"
      ],
      "fixedVersions": [
        "See vendor advisory linked in sources"
      ],
      "startedAt": "2026-01-26",
      "closedAt": "2026-01-26",
      "updatedAt": "2026-01-26",
      "summary": "SmarterTools SmarterMail contains an unrestricted upload of file with dangerous type vulnerability that could allow an unauthenticated attacker to upload arbitrary files to any location on the mail server, potentially enabling remote code execution. CISA added CVE-2025-52691, CVE-2026-23760 to the Known Exploited Vulnerabilities catalog on 2026-01-26 based on evidence of active exploitation.",
      "xPost": null
    }
  ],
  "posts": [],
  "changes": [
    {
      "incident": "smartertools-smartermail-cve-2026-24423",
      "incidentTitle": "SmarterTools SmarterMail: SmarterTools SmarterMail Missing Authentication for Critical Function Vulnerability",
      "severity": "high",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2026-02-05",
      "title": "CISA added CVE-2026-24423 to the KEV catalog (due 2026-02-26).",
      "body": null,
      "sourceUrl": null,
      "url": "https://pwn.watch/i/smartertools-smartermail-cve-2026-24423"
    },
    {
      "incident": "smartertools-smartermail-cve-2025-52691",
      "incidentTitle": "SmarterTools SmarterMail: SmarterTools SmarterMail Unrestricted Upload of File with Dangerous Type Vulnerability",
      "severity": "high",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2026-01-26",
      "title": "CISA added CVE-2025-52691, CVE-2026-23760 to the KEV catalog (due 2026-02-16).",
      "body": null,
      "sourceUrl": null,
      "url": "https://pwn.watch/i/smartertools-smartermail-cve-2025-52691"
    }
  ]
}