[ Vendor · 6 CVEs ]
Smartertools
CVEs affecting Smartertools published in the last 30 days, plus any Smartertools CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-104084 | 9 Oct 2026 | CVSS 8.8 | Smartertools SmartermailSmarterMail before build 9777 contains a privilege escalation vulnerability where JWT access and refresh tokens embed a role claim at issuance that… | |
| CVE-2026-104082 | 9 Oct 2026 | CVSS 7.2 | Smartertools SmartermailSmarterMail before build 9777 contains a remote code execution vulnerability that allows an attacker holding a SysAdmin-scoped access token to bypass… | |
| CVE-2026-104083 | 9 Oct 2026 | CVSS 6.1 | Smartertools SmartermailSmarterMail before build 9777 contains a stored mutation cross-site scripting vulnerability that allows remote attackers to inject executable script… | |
| CVE-2026-24423 | 23 Jan 2026 | CVSS 9.8 | SmarterTools SmarterMail Missing Authentication for Critical FunctionSmarterTools SmarterMail versions prior to build 9511 contain an unauthenticated remote code execution vulnerability in the ConnectToHub API method… | Exploited |
| CVE-2026-23760 | 22 Jan 2026 | CVSS 9.8 | SmarterTools SmarterMail Authentication Bypass Using an Alternate Path or ChannelSmarterTools SmarterMail versions prior to build 9511 contain an authentication bypass vulnerability in the password reset API. The… | Exploited |
| CVE-2025-52691 | 29 Dec 2025 | CVSS 10.0 | SmarterTools SmarterMail Unrestricted Upload of File with Dangerous TypeSuccessful exploitation of the vulnerability could allow an unauthenticated attacker to upload arbitrary files to any location on the mail server… | Exploited |