Skip to content
Threat Feed
Subscribe

Tag

Smartermail

2 briefs RSS
high advisory

SmarterTools SmarterMail Authentication Bypass Vulnerability

An authenticated attacker can exploit a vulnerability in SmarterTools SmarterMail to bypass security controls and hijack other user accounts via identity impersonation.

SmarterMail +1 authentication-bypass email-security vulnerability remote-code-execution privilege-escalation xss
4t 1c updated
high advisory

SmarterTools SmarterMail Local File Inclusion Vulnerability (CVE-2026-7807)

SmarterTools SmarterMail builds prior to 9560 contain a local file inclusion vulnerability in the /api/v1/report/summary/{type} API endpoint (CVE-2026-7807) that allows authenticated users to read arbitrary .json files, potentially leading to credential compromise.

SmarterMail lfi file-inclusion credential-access
2r 1t 1c