Skip to content
NewA calmer, faster ZeroHour
Exploit / PoCcriticalExploited in the wild

Shadowserver finds 6,000+ likely vulnerable SmarterMail servers exposed online

Security Affairsby @securityaffairs ()1 min read4 · 1 read
Analyze CVE-2026-23760 with Vani AIImpact, affected versions, exploitation, mitigations and detection

Vulnerabilities mentioned

All
CVEVulnerabilityCVSSEPSSSignalsPublished
CVE-2026-23760
Unauthenticated Admin Password Reset Bypass in SmarterTools SmarterMail
9.396%KEVRansomwarePoC ×2
KEV

From the original article

1 min read at securityaffairs.com

Shadowserver researchers found 6,000+ SmarterMail servers exposed online and likely vulnerable to a critical auth bypass flaw. Nonprofit security organization Shadowserver reported that over 6,000 SmarterMail servers are exposed on the internet and likely vulnerable to attacks exploiting a critical authentication bypass flaw tracked as CVE-2026-23760 .

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.