Brand
SmarterTools: actively exploited vulnerabilities
3 vulnerabilities in SmarterTools products (SmarterMail) are in CISA’s catalog of exploited vulnerabilities. Last added: February 5, 2026.
-
3 vulnerabilities added in the last 12 months
-
3 exploited vulnerabilities in the catalog, in total
-
0 added in the last 30 days
By category
Add just one SmarterTools category to your radar, or open its page.
- Email 3 vulnerabilities
A high count also reflects how widely a product is deployed and how much attackers care about it: it is not a security rating.
Affected products
- SmarterMail 3 vulnerabilities · Email
Name used by CISA: SmarterTools. Product families: indicative classification by this site.
Patch first
In the order of the main list (Patch first): recent additions first, then the most severe. The number is the rank within this SmarterTools list.
Rank 1SmarterTools SmarterMail
CVE-2025-52691Ransomware
SmarterTools SmarterMail Unrestricted Upload of File with Dangerous Type Vulnerability
Added in the last 12 months: ranked by severity.
- Added
- Jan 26, 2026
- CISA deadline
- 21 days
- CVSS severity
- 10.0 (critical)
Rank 2SmarterTools SmarterMail
CVE-2026-24423Ransomware
SmarterTools SmarterMail Missing Authentication for Critical Function Vulnerability
Added in the last 12 months: ranked by severity.
- Added
- Feb 5, 2026
- CISA deadline
- 21 days
- CVSS severity
- 9.8 (critical)
Rank 3SmarterTools SmarterMail
CVE-2026-23760Ransomware
SmarterTools SmarterMail Authentication Bypass Using an Alternate Path or Channel Vulnerability
Added in the last 12 months: ranked by severity.
- Added
- Jan 26, 2026
- CISA deadline
- 21 days
- CVSS severity
- 9.8 (critical)
Follow and verify
Indicative classification, based on the vendor and product names given by CISA. How products are classified.