CVE-2019-7214

概要

参考情報

• packetstormsecurity.com/files/160416/SmarterMail-6985-Remote-Code-Execution.html
• packetstormsecurity.com/files/173388/SmarterTools-SmarterMail-Remote-Code-Execution.html
• nccgroup.trust/uk/our-research/technical-advisory-multiple-vulnerabilities-in-smartermail · Third Party Advisory
• smartertools.com/smartermail/release-notes/current · Exploit

smartermail のその他の脆弱性

• CVE-2026-7807高 8.8SmarterTools SmarterMail builds prior to 9560 contain a local file inclusion vulnerability in the /api/v1/report/summary/{type} API endpoint…
• CVE-2026-40514緊急 9.1SmarterTools SmarterMail builds prior to 9610 contain a cryptographic weakness in the file and email sharing endpoints that use DES-CBC encr…
• CVE-2026-25067中 5.3SmarterTools SmarterMail versions prior to build 9518 contain an unauthenticated path coercion vulnerability in the background-of-the-day p…
• CVE-2026-24423緊急 9.8悪用確認済み（CISA KEV）SmarterTools SmarterMail versions prior to build 9511 contain an unauthenticated remote code execution vulnerability in the ConnectToHub API…
• CVE-2026-23760緊急 9.8悪用確認済み（CISA KEV）SmarterTools SmarterMail versions prior to build 9511 contain an authentication bypass vulnerability in the password reset API. The force-re…