Skip to content
English

Products › Brands

Brand

SmarterTools: actively exploited vulnerabilities

3 vulnerabilities in SmarterTools products (SmarterMail) are in CISA’s catalog of exploited vulnerabilities. Last added: February 5, 2026.

By category

Add just one SmarterTools category to your radar, or open its page.

  • Email 3 vulnerabilities

A high count also reflects how widely a product is deployed and how much attackers care about it: it is not a security rating.

Affected products

  • SmarterMail 3 vulnerabilities · Email

Name used by CISA: SmarterTools. Product families: indicative classification by this site.

Patch first

In the order of the main list (Patch first): recent additions first, then the most severe. The number is the rank within this SmarterTools list.

  1. Rank 1SmarterTools SmarterMail

    CVE-2025-52691

    Ransomware

    SmarterTools SmarterMail Unrestricted Upload of File with Dangerous Type Vulnerability

    Added in the last 12 months: ranked by severity.

    Added
    Jan 26, 2026
    CISA deadline
    21 days
    CVSS severity
    10.0 (critical)
  2. Rank 2SmarterTools SmarterMail

    CVE-2026-24423

    Ransomware

    SmarterTools SmarterMail Missing Authentication for Critical Function Vulnerability

    Added in the last 12 months: ranked by severity.

    Added
    Feb 5, 2026
    CISA deadline
    21 days
    CVSS severity
    9.8 (critical)
  3. Rank 3SmarterTools SmarterMail

    CVE-2026-23760

    Ransomware

    SmarterTools SmarterMail Authentication Bypass Using an Alternate Path or Channel Vulnerability

    Added in the last 12 months: ranked by severity.

    Added
    Jan 26, 2026
    CISA deadline
    21 days
    CVSS severity
    9.8 (critical)

Follow and verify

Indicative classification, based on the vendor and product names given by CISA. How products are classified.