VulnerabilitycriticalExploited in the wild

SmarterTools patches critical SmarterMail flaw allowing code execution

Security Affairsby @securityaffairsJan 30, 2026 · 11:53 UTC (Jan 30, 2026)2 min read2 · 2 reads

Read at securityaffairs.com

Analyze CVE-2026-24423 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2026-24423 CVE-2026-23760

Tags: cve-2026-24423 cve-2026-23760 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2026-23760	Unauthenticated Admin Password Reset Bypass in SmarterTools SmarterMail	9.3	96%	KEVRansomwarePoC ×2	Jan 22, 2026 KEV Jan 26, 2026
CVE-2026-24423	Unauthenticated RCE in SmarterTools SmarterMail (CVE-2026-24423)	9.3	88%	KEVRansomwarePoC	Jan 23, 2026 KEV Feb 5, 2026

From the original article

2 min read at securityaffairs.com

SmarterTools fixed two SmarterMail flaws, including a critical bug (CVE-2026-24423) that could allow arbitrary code execution. SmarterTools fixed two security bugs in its SmarterMail email software, including a critical vulnerability, tracked as CVE-2026-24423 (CVSS score of 9. 3) that could let attackers run malicious code on affected systems.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.