SmarterTools
CVEs currently on EVULNABLE's Priority Feed for SmarterTools, and this vendor's own CISA KEV history.
In EVULNABLE's ranked feed
Showing all 3 SmarterTools CVEs in EVULNABLE's ranked feed.
#1 95 Immediate CVE-2026-23760 ExigentCISA federal deadline · Overdue by 8 monthsRansomwareCISA KEV SmarterTools — SmarterTools SmarterMail Authentication Bypass Using an Alternate Path or Channel Vulnerability KEV + ransomware, EPSS 96.5%
EVRS 95/100 · EVRS priority: Immediate · Exigent, a flag within Immediate. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and associated with known ransomware campaigns.
#2 93 Immediate CVE-2026-24423 ExigentCISA federal deadline · Overdue by 8 monthsRansomwareCISA KEV SmarterTools — SmarterTools SmarterMail Missing Authentication for Critical Function Vulnerability KEV + ransomware, EPSS 88.2%
EVRS 93/100 · EVRS priority: Immediate · Exigent, a flag within Immediate. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and associated with known ransomware campaigns.
#3 93 Immediate CVE-2025-52691 ExigentCISA federal deadline · Overdue by 8 monthsRansomwareCISA KEV SmarterTools — SmarterTools SmarterMail Unrestricted Upload of File with Dangerous Type Vulnerability KEV + ransomware, EPSS 85.7%
EVRS 93/100 · EVRS priority: Immediate · Exigent, a flag within Immediate. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and associated with known ransomware campaigns.