ZeroDay Findings
Sign inSign up

Findings

CVE-2025-52691

SmarterTools SmarterMail Unrestricted Upload of File with Dangerous Type Vulnerability

Published Dec 28, 2025 · updated Oct 7, 2026 · SmarterTools SmarterMail

SmarterTools SmarterMail contains an unrestricted upload of file with dangerous type vulnerability that could allow an unauthenticated attacker to upload arbitrary files to any location on the mail server, potentially enabling remote code execution.

Timeline

Detection, updates, and resolution for this record.

  1. Dec 28, 2025 · Catalog

    Detected

    SmarterTools SmarterMail contains an unrestricted upload of file with dangerous type vulnerability that could allow an unauthenticated attacker to upload arbitrary files to any location on the mail server, potentially enabling remote code execution.

  2. Jan 26, 2026 · CISA KEV

    Known exploited

    Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

  3. Feb 16, 2026 · CISA KEV

    Remediation due

    Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

  4. Oct 7, 2026 · Catalog

    Updated

    SmarterTools SmarterMail contains an unrestricted upload of file with dangerous type vulnerability that could allow an unauthenticated attacker to upload arbitrary files to any location on the mail server, potentially enabling remote code execution.

Required action

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

CISA due date Feb 16, 2026

Affected

  • cpe smartertools/smartermailversion unspecified
  • vendor SmarterTools SmarterMailversion unspecified

Sources

  • CISA KEVCVE-2025-52691

    SmarterTools SmarterMail contains an unrestricted upload of file with dangerous type vulnerability that could allow an unauthenticated attacker to upload arbitrary files to any location on the mail server, potentially enabling remote code execution.

    cisa.gov
  • CVE.orgCVE-2025-52691

    Official CVE identifier

    cve.org
  • FIRST EPSSCVE-2025-52691

    30-day exploitation probability 85.7%

    first.org
  • Metasploit Modulesexploit_multi/http/smartermail_guid_file_upload

    Public module reference (excellent). Module source is not copied into this catalog.

    rapid7.com
  • NIST NVDCVE-2025-52691

    Successful exploitation of the vulnerability could allow an unauthenticated attacker to upload arbitrary files to any location on the mail server, potentially enabling remote code execution.

    nvd.nist.gov

References