Product by SmarterTools

    SmarterTools SmarterMail

    31 known vulnerabilities in SmarterTools SmarterMail (SmarterTools), 3 of them actively exploited (CISA KEV).

    Key figures

    31

    Vulnerabilities

    3

    Actively exploited (KEV)

    3

    Used by ransomware

    6

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in SmarterTools SmarterMail (SmarterTools)
    CriticalCVE-2025-52691

    Upload Arbitrary Files

    In CISA KEVRansomware

    		10.0
    CriticalCVE-2026-23760

    SmarterTools SmarterMail < Build 9511 Authentication Bypass via Password Reset API

    In CISA KEVRansomware

    		9.8
    CriticalCVE-2026-24423

    SmarterTools SmarterMail < Build 9511 Unauthenticated RCE via ConnectToHub API

    In CISA KEVRansomware

    		9.8
    CriticalCVE-2019-7214

    SmarterTools SmarterMail: Deserialization of Untrusted Data

    		9.8
    MediumCVE-2019-7213

    SmarterTools SmarterMail: Path Traversal

    		6.5
    CriticalCVE-2021-32234

    SmarterTools SmarterMail: Remote Code Execution

    		9.8
    HighCVE-2026-104082

    SmarterMail < Build 9777 SysAdmin Remote Code Execution via Volume Mount

    		7.2
    HighCVE-2026-104084

    SmarterMail < Build 9777 Stale JWT Role Claim Privilege Escalation via Refresh Token

    		8.8
    HighCVE-2020-29548

    SmarterTools SmarterMail: security vulnerability

    		8.1
    HighCVE-2019-7212

    SmarterTools SmarterMail: security vulnerability

    		8.2
    HighCVE-2026-7807

    SmarterTools SmarterMail: Path Traversal

    		8.1
    MediumCVE-2015-9276

    SmarterTools SmarterMail: Cross-Site Scripting (XSS)

    		6.1
    MediumCVE-2026-104083

    SmarterMail < Build 9777 Stored Mutation XSS via MathML Foreign Content

    		6.1
    Not ratedCVE-2010-3486

    SmarterTools SmarterMail: Path Traversal

    		—
    CriticalCVE-2026-40514

    SmarterTools SmarterMail < Build 9610 Cryptographic Weakness via Weak RNG

    		5.9
    HighCVE-2026-26930

    SmarterTools SmarterMail: Cross-site Scripting

    		7.2
    Not ratedCVE-2008-1854

    SmarterTools SmarterMail: Denial of Service

    		—
    Not ratedCVE-2012-2578

    SmarterTools SmarterMail: Cross-Site Scripting (XSS)

    		—
    MediumCVE-2026-25067

    SmarterTools SmarterMail < Build 9518 Unauthenticated background-of-the-day Path Coercion

    		5.3
    MediumCVE-2019-7211

    SmarterTools SmarterMail: Cross-Site Scripting (XSS)

    		6.1
    Not ratedCVE-2004-2586

    SmarterTools SmarterMail: Path Traversal

    		—
    Not ratedCVE-2004-2587

    SmarterTools SmarterMail: Buffer Overflow

    		—
    Not ratedCVE-2004-2583

    SmarterTools SmarterMail: Denial of Service

    		—
    MediumCVE-2021-43977

    SmarterTools SmarterMail: Cross-Site Scripting (XSS)

    		6.1
    MediumCVE-2021-32233

    SmarterTools SmarterMail: Cross-Site Scripting (XSS)

    		6.1

    All vulnerabilities in search

    All products by SmarterTools