Catalog

Findings

Filter the merged record by severity, source, stack, and weakness type.

SearchSeveritySourceStackWeaknessSort

Known exploited only

High8.6SmarterMail before build 9777 contains a remote code execution vulnerability that allows an attacker holding a SysAdmin-scoped access token to bypass the Volume Mount…CVE-2026-104082 · CVE.org · FIRST EPSS · NIST NVD · SmarterMailEPSS 0.6%Oct 9, 2026
Critical9.3SmarterTools SmarterMail Missing Authentication for Critical Function VulnerabilityCVE-2026-24423 · SmarterTools · SmarterMail · CISA KEV · CVE.org · FIRST EPSS · SmarterMailKEVEPSS 88.2%Jan 23, 2026
Critical9.3SmarterTools SmarterMail Authentication Bypass Using an Alternate Path or Channel VulnerabilityCVE-2026-23760 · SmarterTools · SmarterMail · CISA KEV · CVE.org · FIRST EPSS · SmarterMailKEVEPSS 96.5%Jan 22, 2026
Critical10.0SmarterTools SmarterMail Unrestricted Upload of File with Dangerous Type VulnerabilityCVE-2025-52691 · SmarterTools · SmarterMail · CISA KEV · CVE.org · FIRST EPSS · SmarterMailKEVEPSS 85.7%Dec 28, 2025