SSmarterTools

Products

Exploited and recent CVEs

• CVE-2026-24423 Critical 9.3 Exploited SmarterTools SmarterMail < Build 9511 Unauthenticated RCE via ConnectToHub API 88.2%
• CVE-2026-23760 Critical 9.3 Exploited SmarterTools SmarterMail < Build 9511 Authentication Bypass via Password Reset API 96.4%
• CVE-2025-52691 Critical 10.0 Exploited Upload Arbitrary Files 85.7%
• CVE-2026-104084 High 8.8 SmarterMail < Build 9777 Stale JWT Role Claim Privilege Escalation via Refresh Token 0.3%
• CVE-2026-104083 Medium 6.1 SmarterMail < Build 9777 Stored Mutation XSS via MathML Foreign Content 0.3%
• CVE-2026-104082 High 7.2 SmarterMail < Build 9777 SysAdmin Remote Code Execution via Volume Mount 0.9%
• CVE-2026-26930 High 7.2 SmarterTools SmarterMail before 9526 allows XSS via MAPI requests. 0.3%
• CVE-2026-25067 Medium 6.9 SmarterTools SmarterMail < Build 9518 Unauthenticated background-of-the-day Path Coercion 0.3%
• CVE-2020-36926 High 7.5 SmarterTools SmarterTrack 7922 -Information Disclosure 0.6%
• CVE-2022-24387 Critical 9.1 File upload and overwrite to app_data/Config in SmarterTrack v100.0.8019.14010 2.1%
• CVE-2022-24384 High 8.8 Reflective XSS on SmarterTrack v100.0.8019.14010 4.1%
• CVE-2022-24386 High 8.8 Stored XSS in SmarterTrack v100.0.8019.14010 0.7%
• CVE-2022-24385 Medium 6.5 Information disclosure via direct object access on SmarterTrack v100.0.8019.14010 0.9%