Vendor
SmarterTools
- CVEs tracked · all time
- 3
- in CISA KEV · all time
- 3
- articles · since 11 Sep
- 0
- articles · all time
- 12
No articles in the last 45 daysThe latest: Dark Reading, Tue 7 Apr, 21:02 UTC.See the full timeline
Products: SmarterMail
CVEs
3 CVEsCVE-2026-23760SmarterTools SmarterMail Authentication Bypass Using an Alternate Path or Channel VulnerabilityCVSS9.3CriticalExploited96%EPSS10articles
CVE-2026-24423SmarterTools SmarterMail Missing Authentication for Critical Function VulnerabilityCVSS9.3CriticalExploited88%EPSS8articles
CVE-2025-52691SmarterTools SmarterMail Unrestricted Upload of File with Dangerous Type VulnerabilityCVSS10.0CriticalExploited86%EPSS3articles
- Storm-1175 Deploys Medusa Ransomware at 'High Velocity'Dark Reading
- Email Under Siege: Storm-2603 Exploits SmarterMail to Deploy Warlock RansomwareSecurityOnline
- Warlock Ransomware Breaches SmarterTools Through Unpatched SmarterMail ServerThe Hacker News
- Warlock Gang Breaches SmarterTools Via SmarterMail BugsDark Reading
- SmarterTools Hit by Ransomware via Vulnerability in Its Own ProductSecurityWeek
- U.S. CISA adds SmarterTools SmarterMail and React Native Community CLI flaws to its Known Exploited Vulnerabilities catalogSecurity Affairs
- Critical SmarterMail Vulnerability Exploited in Ransomware AttacksSecurityWeek
- SmarterTools patches critical SmarterMail flaw allowing code executionSecurity Affairs
- SmarterMail Fixes Critical Unauthenticated RCE Flaw with CVSS 9.3 ScoreThe Hacker News
- Shadowserver finds 6,000+ likely vulnerable SmarterMail servers exposed onlineSecurity Affairs
- U.S. CISA adds Microsoft Office, GNU InetUtils, SmarterTools SmarterMail, and Linux Kernel flaws to its Known Exploited Vulnerabilities catalogSecurity Affairs
- Fresh SmarterMail Flaw Exploited for Admin AccessSecurityWeek · first in our coverage