SmarterTools
In 5 briefs, most recently 11 February 2026. RSS for this tag
Learn more: Vulnerabilities (NVD) ↗
Known exploited (CISA KEV)
3 SmarterTools vulnerabilities are on CISA's list of vulnerabilities exploited in the wild, 3 of them used in ransomware campaigns. Most recent:
- CVE-2026-24423 SmarterTools SmarterMail Missing Authentication for Critical Function Vulnerability
- CVE-2026-23760 SmarterTools SmarterMail Authentication Bypass Using an Alternate Path or Channel Vulnerability
- CVE-2025-52691 SmarterTools SmarterMail Unrestricted Upload of File with Dangerous Type Vulnerability
Coverage in DanSec Daily
- Warlock ransomware breaches SmarterTools via unpatched SmarterMail, Conduent breach exposes Volvo customer data, Ivanti zero-days hit Dutch regulators.
- UNC3886 breaches Singapore's top telcos, Warlock exploits SmarterMail to hit SmarterTools, and a Firebase flaw exposes 300M Chat & Ask AI messages.
- Flickr third-party email breach, SmarterMail RCE (CVE-2026-24423) exploited in ransomware, and TGR-STA-1030 espionage across 37 countries.
- Under Armour ransomware breach, Fortinet FortiGate attacks, and Osiris ransomware hitting a Southeast Asian food franchisee, plus SmarterMail and Cisco …
- ESA confirms breach of external servers, Korean Air data theft tied to Oracle EBS hack, and BlackCat ransomware pleas by ex-Sygnia and DigitalMint staff.