SmarterTools Known Exploited Vulnerabilities
Evidence-backed KEV intelligence for SmarterTools products — CISA KEV status, confidence, sensor telemetry, and virtual-patch availability.
Total KEVs
3
In CISA KEV
3
Beyond CISA KEV
0
Sensor Observed
0
Virtual Patch Available
0
SmarterTools KEVs Added by Year
Loading...
3 SmarterTools KEVs added all time (primary attestation date).
Attested CVEs
| CVE | Product | Confidence | CISA KEV | Added |
|---|---|---|---|---|
|
CVE-2026-24423
SmarterTools SmarterMail < Build 9511 Unauthenticated RCE via ConnectToHub API |
SmarterMail | Confirmed | In CISA | 01 Jun 2026 |
|
CVE-2026-23760
SmarterTools SmarterMail < Build 9511 Authentication Bypass via Password Reset API |
SmarterMail | Confirmed | In CISA | 01 Jun 2026 |
|
CVE-2025-52691
Upload Arbitrary Files |
SmarterMail | Confirmed | In CISA | 01 Jun 2026 |
Common Vulnerability Classes (CWE)
- CWE-288 — Authentication Bypass Using an Alternate Path or Channel 1
- CWE-306 — Missing Authentication for Critical Function 1
- CWE-434 — Unrestricted Upload of File with Dangerous Type 1
Browse all known exploited vulnerabilities · What is a known exploited vulnerability? · Methodology