RansomwarecriticalExploited in the wild

Ransomware attackers are exploiting critical SmarterMail vulnerability (CVE-2026-24423)

Help Net Securityby @zeljkazorzFeb 12, 2026 · 09:45 UTC (Feb 12, 2026)2 min read1 · 1 read

Read at helpnetsecurity.com

Analyze CVE-2026-24423 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2026-24423 CVE-2025-52691 CVE-2026-23760

Tags: cve-2026-24423 cve-2025-52691 cve-2026-23760 ransomware

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2025-52691	Unauthenticated Arbitrary File Upload RCE in SmarterTools SmarterMail	10.0	86%	KEVRansomwarePoC ×2	Dec 29, 2025 KEV Jan 26, 2026
CVE-2026-23760	Unauthenticated Admin Password Reset Bypass in SmarterTools SmarterMail	9.3	96%	KEVRansomwarePoC ×2	Jan 22, 2026 KEV Jan 26, 2026
CVE-2026-24423	Unauthenticated RCE in SmarterTools SmarterMail (CVE-2026-24423)	9.3	88%	KEVRansomwarePoC	Jan 23, 2026 KEV Feb 5, 2026

From the original article

2 min read at helpnetsecurity.com

For the third time in two weeks, CISA added a vulnerability (CVE-2026-24423) affecting SmarterTools’ SmarterMail email and collaboration server to its Known Exploited Vulnerabilities catalog, and this one is being exploited in ransomware attacks.

Help Net Security

By @zeljkazorz · helpnetsecurity.com

Read the full article at Help Net Security

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.