SmarterTools SmarterMail

• CVE-2026-24423 Critical 9.3 Exploited SmarterTools SmarterMail < Build 9511 Unauthenticated RCE via ConnectToHub API 88.2%
• CVE-2026-23760 Critical 9.3 Exploited SmarterTools SmarterMail < Build 9511 Authentication Bypass via Password Reset API 96.4%
• CVE-2025-52691 Critical 10.0 Exploited Upload Arbitrary Files 85.7%
• CVE-2026-104084 High 8.8 SmarterMail < Build 9777 Stale JWT Role Claim Privilege Escalation via Refresh Token 0.3%
• CVE-2026-104083 Medium 6.1 SmarterMail < Build 9777 Stored Mutation XSS via MathML Foreign Content 0.3%
• CVE-2026-104082 High 7.2 SmarterMail < Build 9777 SysAdmin Remote Code Execution via Volume Mount 0.9%
• CVE-2026-26930 High 7.2 SmarterTools SmarterMail before 9526 allows XSS via MAPI requests. 0.3%
• CVE-2026-25067 Medium 6.9 SmarterTools SmarterMail < Build 9518 Unauthenticated background-of-the-day Path Coercion 0.3%