CVE-2026-24423 1

Vulnerability (CVE)

CVE-2026-24423: Smarter Tools Smarter Mail Missing Authentication for Critical Function Vulnerability

Known Exploited Vulnerabilities CISA KEV Catalog Feb 05, 2026

SmarterTools SmarterMail contains a missing authentication for critical function vulnerability in the ConnectToHub API method. This could allow the attacker to point the SmarterMail instance to a malicious HTTP server which serves the malicious OS command...

Vulnerabilities & Patching