{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/smartermail--100.0.9413/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:smartertools:smartermail:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":10,"id":"CVE-2025-52691"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["SmarterMail (\u003c 100.0.9413)"],"_cs_severities":["critical"],"_cs_tags":["remote-code-execution","file-upload","vulnerability","cve"],"_cs_type":"advisory","_cs_vendors":["SmarterTools"],"content_html":"\u003cp\u003eSmarterMail Build 9406 and earlier contains an unauthenticated arbitrary file upload vulnerability (CVE-2025-52691). The vulnerability allows an attacker to upload arbitrary files to any location on the mail server, which can be leveraged to achieve remote code execution. Public exploit code for this vulnerability is actively circulating on platforms such as GitHub and KitPloit.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation allows an unauthenticated attacker to gain remote code execution on the mail server with high privileges (CVSS 10.0).\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpgrade SmarterMail to Build 9413 or later immediately to remediate CVE-2025-52691.\u003c/li\u003e\n\u003cli\u003eAudit web server access logs for anomalous POST requests directed at SmarterMail file upload endpoints.\u003c/li\u003e\n\u003cli\u003eRestrict internet exposure of SmarterMail management interfaces where possible.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-10-23T20:48:03Z","date_published":"2026-10-23T20:48:03Z","id":"https://feed.craftedsignal.io/briefs/2026-10-smartermail-rce/","summary":"CVE-2025-52691 is a critical arbitrary file upload vulnerability in SmarterMail (Build 9406 and earlier) that enables unauthenticated remote code execution, with multiple proof-of-concept exploits publicly available.","title":"SmarterTools SmarterMail: Unauthenticated remote code execution (CVE-2025-52691)","url":"https://feed.craftedsignal.io/briefs/2026-10-smartermail-rce/"}],"language":"en","title":"CraftedSignal Threat Feed - SmarterMail (\u003c 100.0.9413)","version":"https://jsonfeed.org/version/1.1"}