Catalog
Findings
Filter by record type (vulnerability, fix, incident, intelligence, research), severity, source, stack, and weakness.
- High8.6SmarterMail before build 9777 contains a remote code execution vulnerability that allows an attacker holding a SysAdmin-scoped access token to bypass the Volume Mount…EPSS 0.6%Oct 9, 2026
- High8.7SmarterTools SmarterMail builds prior to 9560 contain a local file inclusion vulnerability in the /api/v1/report/summary/{type} API endpoint that allows authenticated…EPSS 0.3%May 8, 2026
- High8.2SmarterTools SmarterMail builds prior to 9610 contain a cryptographic weakness in the file and email sharing endpoints that use DES-CBC encryption with keys and initia…EPSS 0.3%Apr 27, 2026
- Critical9.3SmarterTools SmarterMail Missing Authentication for Critical Function VulnerabilityKEVEPSS 88.2%Jan 23, 2026
- Critical9.3SmarterTools SmarterMail Authentication Bypass Using an Alternate Path or Channel VulnerabilityKEVEPSS 96.5%Jan 22, 2026
- Critical10.0SmarterTools SmarterMail Unrestricted Upload of File with Dangerous Type VulnerabilityKEVEPSS 85.7%Dec 28, 2025
6 records · page 1 of 1
PreviousNext