Ransomware group breached SmarterTools via flaw in its SmarterMail deployment
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-24423 | Unauthenticated RCE in SmarterTools SmarterMail (CVE-2026-24423) | 9.3 | 88% | KEVRansomwarePoC | KEV |
From the original article
2 min read at helpnetsecurity.com
SmarterTools, the company behind the popular Microsoft Exchange alternative SmarterMail, has been breached by a ransomware-wielding group that leveraged a recently fixed vulnerability in that solution. Derek Curtis, the firm’s Chief Operating Officer, said that the breach happened on January 29, 2026. “Prior to the breach, we had approximately 30 servers/VMs with SmarterMail installed throughout our network.
By @zeljkazorz · helpnetsecurity.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.