Known Exploited Vulnerabilities January 26, 2026 · CISA KEV Catalog

CVE-2025-52691: Smarter Tools Smarter Mail Unrestricted Upload of File with Dangerous Type Vulnerability

SmarterTools SmarterMail contains an unrestricted upload of file with dangerous type vulnerability that could allow an unauthenticated attacker to upload arbitrary files to any location on the mail server, potentially enabling remote code execution.

Read the original at CISA KEV Catalog ↗

Topics

Vulnerabilities & Patching

Mentions

CVE-2025-52691SmarterTools

Related

CVE-2026-24423: Smarter Tools Smarter Mail Missing Authentication for Critical Function Vulnerability Known Exploited Vulnerabilities · Feb 05, 2026

CVE-2026-23760: Smarter Tools Smarter Mail Authentication Bypass Using an Alternate Path or Channel Vulnerability Known Exploited Vulnerabilities · Jan 26, 2026

Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026