Catalog

Vulnerability catalog

Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.

SearchRecord typeSeveritySourceStackWeaknessSort

Known exploited only

High8.7SmarterTools SmarterMail builds prior to 9560 contain a local file inclusion vulnerability in the /api/v1/report/summary/{type} API endpoint that allows authenticated…Vuln · CVE-2026-7807 · smartertools · smartermail · CVE.org · FIRST EPSS · NIST NVD · SmarterMailCheck if you run itEPSS 0.34%May 8, 2026
High8.2SmarterTools SmarterMail builds prior to 9610 contain a cryptographic weakness in the file and email sharing endpoints that use DES-CBC encryption with keys and initia…Vuln · CVE-2026-40514 · smartertools · smartermail · CVE.org · FIRST EPSS · NIST NVD · SmarterMailCheck if you run itEPSS 0.26%Apr 27, 2026
Critical9.3SmarterTools SmarterMail Missing Authentication for Critical Function VulnerabilityVuln · CVE-2026-24423 · SmarterTools · SmarterMail · CISA KEV · CVE.org · FIRST EPSS · SmarterMailPatch nowKEVEPSS 88.18%Jan 23, 2026
Critical9.3SmarterTools SmarterMail Authentication Bypass Using an Alternate Path or Channel VulnerabilityVuln · CVE-2026-23760 · SmarterTools · SmarterMail · CISA KEV · CVE.org · FIRST EPSS · SmarterMailPatch nowKEVEPSS 96.54%Jan 22, 2026
Critical10.0SmarterTools SmarterMail Unrestricted Upload of File with Dangerous Type VulnerabilityVuln · CVE-2025-52691 · SmarterTools · SmarterMail · CISA KEV · CVE.org · FIRST EPSS · SmarterMailPatch nowKEVEPSS 85.66%Dec 28, 2025