What’s Vulnerable › Products
SmarterTools SmarterMail vulnerabilities
31 known vulnerabilities, 3 confirmed exploited in the wild (CISA KEV), 10 published in the last 12 months.
Check whether your SmarterTools SmarterMail version is affected
Exploited SmarterTools SmarterMail vulnerabilities
- CVE-2026-24423 — SmarterTools SmarterMail Missing Authentication for Critical Function Vulnerability
- CVE-2026-23760 — SmarterTools SmarterMail Authentication Bypass Using an Alternate Path or Channel Vulnerability
- CVE-2025-52691 — SmarterTools SmarterMail Unrestricted Upload of File with Dangerous Type Vulnerability
Latest SmarterTools SmarterMail vulnerabilities
- CVE-2026-104084 — SmarterMail < Build 9777 Stale JWT Role Claim Privilege Escalation via Refresh Token (CVSS 8.8)
- CVE-2026-104083 — SmarterMail < Build 9777 Stored Mutation XSS via MathML Foreign Content (CVSS 6.1)
- CVE-2026-104082 — SmarterMail < Build 9777 SysAdmin Remote Code Execution via Volume Mount (CVSS 7.2)
- CVE-2026-7807 — SmarterTools SmarterMail < Build 9560 Server Local File Inclusion via the /api/v1/report/summary/{type} API (CVSS 8.8)
- CVE-2026-40514 — SmarterTools SmarterMail < Build 9610 Cryptographic Weakness via Weak RNG (CVSS 9.1)
- CVE-2026-26930 — (CVSS 7.2)
- CVE-2026-25067 — SmarterTools SmarterMail < Build 9518 Unauthenticated background-of-the-day Path Coercion (CVSS 5.3)
- CVE-2026-24423 — SmarterTools SmarterMail Missing Authentication for Critical Function Vulnerability (CVSS 9.8) — exploited
- CVE-2026-23760 — SmarterTools SmarterMail Authentication Bypass Using an Alternate Path or Channel Vulnerability (CVSS 9.8) — exploited
- CVE-2025-52691 — SmarterTools SmarterMail Unrestricted Upload of File with Dangerous Type Vulnerability (CVSS 10.0) — exploited
- CVE-2023-48116 — (CVSS 5.4)
- CVE-2023-48115 — (CVSS 5.4)
- CVE-2023-48114 — (CVSS 5.4)
- CVE-2021-43977 — (CVSS 6.1)
- CVE-2021-32234 — (CVSS 9.8)
- CVE-2021-40377 — (CVSS 5.4)
- CVE-2020-29548 — (CVSS 8.1)
- CVE-2021-32233 — (CVSS 6.1)
- CVE-2019-7214 — (CVSS 9.8)
- CVE-2019-7213 — (CVSS 6.5)
- CVE-2019-7212 — (CVSS 8.2)
- CVE-2019-7211 — (CVSS 6.1)
- CVE-2015-9276 — (CVSS 6.1)
- CVE-2012-2578 — (CVSS 4.3)
- CVE-2010-3486 — (CVSS 5.0)