SmarterTools SmarterMail Unrestricted Upload of File with Dangerous Type Vulnerability

概要

参考情報

• csa.gov.sg/alerts-and-advisories/alerts/al-2025-124 · Third Party Advisory
• watchtowrlabs/watchTowr-vs-SmarterMail-CVE-2025-52691 · Exploit
• cisa.gov/known-exploited-vulnerabilities-catalog · US Government Resource
• CISA KEV · CVE-2025-52691

smartermail のその他の脆弱性

• CVE-2026-7807高 8.8SmarterTools SmarterMail builds prior to 9560 contain a local file inclusion vulnerability in the /api/v1/report/summary/{type} API endpoint…
• CVE-2026-40514緊急 9.1SmarterTools SmarterMail builds prior to 9610 contain a cryptographic weakness in the file and email sharing endpoints that use DES-CBC encr…
• CVE-2026-25067中 5.3SmarterTools SmarterMail versions prior to build 9518 contain an unauthenticated path coercion vulnerability in the background-of-the-day p…
• CVE-2026-24423緊急 9.8悪用確認済み（CISA KEV）SmarterTools SmarterMail versions prior to build 9511 contain an unauthenticated remote code execution vulnerability in the ConnectToHub API…
• CVE-2026-23760緊急 9.8悪用確認済み（CISA KEV）SmarterTools SmarterMail versions prior to build 9511 contain an authentication bypass vulnerability in the password reset API. The force-re…