SmarterTools SmarterMail 16.x through 100.x before 100.0.7803 allows remote code execution.
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HSmartertools Smartermail
APPSmartertools16.0.6345 – 100.0.7803 (bez)
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
RCE
Related vulnerabilities
CVE-2026-24423CRITICAL9.3⚠ KEVPL ✓ten sam produkt
SmarterMail – nieuwierzytelnione RCE przez ConnectToHub API
CVE-2026-23760CRITICAL9.3⚠ KEVPL ✓ten sam produkt
Pominięcie uwierzytelnienia w API resetowania hasła SmarterMail
CVE-2025-52691CRITICAL10.0⚠ KEVPL ✓ten sam produkt
Nieautoryzowany upload plików i RCE w SmarterMail (SmarterTools)
CVE-2019-7214CRITICAL9.8ten sam produkt
SmarterTools SmarterMail 16.x before build 6985 allows deserialization of untrusted data. An unauthenticated a...
CVE-2026-7807HIGH8.7ten sam produkt
SmarterTools SmarterMail builds prior to 9560 contain a local file inclusion vulnerability in the /api/v1/repo...