Vulnerabilities in SmarterTools
13 resultsCVE-2026-23760CRITICALSmarterTools SmarterMail < Build 9511 Authentication Bypass via Password Reset APIEPSS 96.4%KEVCVE-2026-24423CRITICALSmarterTools SmarterMail < Build 9511 Unauthenticated RCE via ConnectToHub APIEPSS 88.2%KEVCVE-2025-52691CRITICALUpload Arbitrary FilesEPSS 85.7%KEVCVE-2022-24384HIGHReflective XSS on SmarterTrack v100.0.8019.14010EPSS 4.1%CVE-2022-24387CRITICALFile upload and overwrite to app_data/Config in SmarterTrack v100.0.8019.14010EPSS 2.1%CVE-2022-24385MEDIUMInformation disclosure via direct object access on SmarterTrack v100.0.8019.14010EPSS 0.9%CVE-2026-104082HIGHSmarterMail < Build 9777 SysAdmin Remote Code Execution via Volume MountEPSS 0.9%CVE-2022-24386HIGHStored XSS in SmarterTrack v100.0.8019.14010EPSS 0.7%CVE-2020-36926MEDIUMSmarterTools SmarterTrack 7922 -Information DisclosureEPSS 0.6%CVE-2026-26930HIGHSmarterTools SmarterMail before 9526 allows XSS via MAPI requests.EPSS 0.3%CVE-2026-104083MEDIUMSmarterMail < Build 9777 Stored Mutation XSS via MathML Foreign ContentEPSS 0.3%CVE-2026-104084HIGHSmarterMail < Build 9777 Stale JWT Role Claim Privilege Escalation via Refresh TokenEPSS 0.3%CVE-2026-25067MEDIUMSmarterTools SmarterMail < Build 9518 Unauthenticated background-of-the-day Path CoercionEPSS 0.3%