Exploit / PoCcriticalExploited in the wild

U.S. CISA adds SmarterTools SmarterMail and React Native Community CLI flaws to its Known Exploited Vulnerabilities catalog

Security Affairsby @securityaffairsFeb 6, 2026 · 09:22 UTC (Feb 6, 2026)3 min read2 · 1 read

Read at securityaffairs.com

Analyze CVE-2025-11953 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2025-11953 CVE-2026-24423

Tags: cve-2025-11953 cve-2026-24423 exploit

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2025-11953	Unauthenticated OS Command Injection in React Native Community CLI (Metro4Shell)	9.8	94%	KEVPoC ×2	Nov 3, 2025 KEV Feb 5, 2026
CVE-2026-24423	Unauthenticated RCE in SmarterTools SmarterMail (CVE-2026-24423)	9.3	88%	KEVRansomwarePoC	Jan 23, 2026 KEV Feb 5, 2026

From the original article

3 min read at securityaffairs.com

U. S. Cybersecurity and Infrastructure Security Agency (CISA) adds SmarterTools SmarterMail and React Native Community CLI flaws to its Known Exploited Vulnerabilities catalog.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.