Security Digest

SmarterTools: known exploited vulnerabilities

3 SmarterTools CVEs CISA has confirmed as exploited in the wild since October 2023. If you run these products, check each one.

AddedCVEProduct and flawCISA due
2026-02-05CVE-2026-24423SmarterTools SmarterMail
SmarterTools SmarterMail Missing Authentication for Critical Function Vulnerability Ransomware
2026-02-26
2026-01-26CVE-2026-23760SmarterTools SmarterMail
SmarterTools SmarterMail Authentication Bypass Using an Alternate Path or Channel Vulnerability Ransomware
2026-02-16
2026-01-26CVE-2025-52691SmarterTools SmarterMail
SmarterTools SmarterMail Unrestricted Upload of File with Dangerous Type Vulnerability Ransomware
2026-02-16