Known Exploited Vulnerabilities February 05, 2026 · CISA KEV Catalog

CVE-2026-24423: Smarter Tools Smarter Mail Missing Authentication for Critical Function Vulnerability

SmarterTools SmarterMail contains a missing authentication for critical function vulnerability in the ConnectToHub API method. This could allow the attacker to point the SmarterMail instance to a malicious HTTP server which serves the malicious OS command and could lead to command execution.

Read the original at CISA KEV Catalog ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2026-24423 SmarterTools
Related: CVE-2026-23760: Smarter Tools Smarter Mail Authentication Bypass Using an Alternate Path or Channel Vulnerability Known Exploited Vulnerabilities · Jan 26, 2026
CVE-2025-52691: Smarter Tools Smarter Mail Unrestricted Upload of File with Dangerous Type Vulnerability Known Exploited Vulnerabilities · Jan 26, 2026
Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026