CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
SmarterTools SmarterMail ConnectToHub API Unauthenticated Remote Code Execution (RCE) Vulnerability (CVE-2026-24423) Urgent Security Advisory
[Affected Scope] SmarterTools SmarterMail software versions prior to Build 9511
[Impact] Unauthenticated remote attackers can execute arbitrary OS commands on the target system via a malicious HTTP server, leading to complete system compromise
[Mitigation] Immediately upgrade SmarterMail to the latest stable version (Build 9511 or higher) and restrict access to administrative endpoints
SmarterTools SmarterMail Authentication Bypass & Remote Code Execution Vulnerability (CVE-2026-23760) Security Advisory
[Affected Scope] All SmarterTools SmarterMail versions prior to build 9511
[Impact] Unauthenticated attackers can bypass authentication to reset system administrator passwords, gaining full administrative control and executing arbitrary OS commands with SYSTEM/root privileges
[Mitigation] Immediately upgrade SmarterMail to build 9511 or later, and restrict external access to administrative APIs until patched
SmarterMail Unauthenticated Arbitrary File Upload and Remote Code Execution Vulnerability (CVE-2025-52691) Critical Security Advisory
[Affected Scope] SmarterMail mail server software
[Impact] Unauthenticated remote attackers can upload arbitrary files to any location on the mail server, potentially leading to full Remote Code Execution (RCE)
[Mitigation] Immediately apply the latest official security patches and restrict external access to sensitive upload endpoints and admin interfaces