Skip to contentSmartertools Inc. Smartermail vulnerabilities
- smartertools smartermailSmarterMail < Build 9777 Stale JWT Role Claim Privilege Escalation via Refresh TokenCVE-2026-1040848.7 High
- smartertools smartermailSmarterMail < Build 9777 Stored Mutation XSS via MathML Foreign ContentCVE-2026-1040835.3 Medium
- smartertools smartermailSmarterMail < Build 9777 SysAdmin Remote Code Execution via Volume MountCVE-2026-104082Public exploit8.6 High
- smartertools smartermailSmarterTools SmarterMail < Build 9560 Server Local File Inclusion via the /api/v1/report/summary/{type} APICVE-2026-78078.7 High
- smartertools smartermailSmarterTools SmarterMail < Build 9610 Cryptographic Weakness via Weak RNGCVE-2026-405148.2 High
- smartertools smartermailSmarterTools SmarterMail before 9526 allows XSS via MAPI requests.CVE-2026-269307.2 High
- smartertools smartermailSmarterTools SmarterMail < Build 9518 Unauthenticated background-of-the-day Path CoercionCVE-2026-250676.9 Medium
- smartertools smartermailSmarterTools SmarterMail < Build 9511 Unauthenticated RCE via ConnectToHub APICVE-2026-24423In KEVPublic exploitEPSS 88.2%9.3 Critical
- smartertools smartermailSmarterTools SmarterMail < Build 9511 Authentication Bypass via Password Reset APICVE-2026-23760In KEVPublic exploitEPSS 96.4%9.3 Critical
- smartertools smartermailUpload Arbitrary FilesCVE-2025-52691In KEVPublic exploitEPSS 85.7%10.0 Critical