CVE-2026-7807HIGH 8.8SmarterTools SmarterMail builds prior to 9560 contain a local file inclusion vulnerability in the /api/v1/report/summary/{type} API endpoint…
CVE-2026-40514CRITICAL 9.1SmarterTools SmarterMail builds prior to 9610 contain a cryptographic weakness in the file and email sharing endpoints that use DES-CBC encr…
CVE-2026-25067MEDIUM 5.3SmarterTools SmarterMail versions prior to build 9518 contain an unauthenticated path coercion vulnerability in the background-of-the-day p…
CVE-2026-24423CRITICAL 9.8EXPLOITED (CISA KEV)SmarterTools SmarterMail versions prior to build 9511 contain an unauthenticated remote code execution vulnerability in the ConnectToHub API…
CVE-2026-23760CRITICAL 9.8EXPLOITED (CISA KEV)SmarterTools SmarterMail versions prior to build 9511 contain an authentication bypass vulnerability in the password reset API. The force-re…