Vulnerabilities in SmarterTools
10 resultsCVE-2026-23760CRITICALSmarterTools SmarterMail < Build 9511 Authentication Bypass via Password Reset APIEPSS 96.3%KEVCVE-2026-24423CRITICALSmarterTools SmarterMail < Build 9511 Unauthenticated RCE via ConnectToHub APIEPSS 87.7%KEVCVE-2025-52691CRITICALUpload Arbitrary FilesEPSS 85.5%KEVCVE-2022-24384HIGHReflective XSS on SmarterTrack v100.0.8019.14010EPSS 4.4%CVE-2022-24387CRITICALFile upload and overwrite to app_data/Config in SmarterTrack v100.0.8019.14010EPSS 1.5%CVE-2022-24385MEDIUMInformation disclosure via direct object access on SmarterTrack v100.0.8019.14010EPSS 0.8%CVE-2022-24386HIGHStored XSS in SmarterTrack v100.0.8019.14010EPSS 0.7%CVE-2020-36926MEDIUMSmarterTools SmarterTrack 7922 -Information DisclosureEPSS 0.4%CVE-2026-26930HIGHSmarterTools SmarterMail before 9526 allows XSS via MAPI requests.EPSS 0.3%CVE-2026-25067MEDIUMSmarterTools SmarterMail < Build 9518 Unauthenticated background-of-the-day Path CoercionEPSS 0.3%