#SmarterTools
LightNews LightNews
neonotu.bsky.social
🟠 HOCH · SmarterTools SmarterMail: mehrere Schwachstellen

CERT-Bund (BSI)
SmarterTools SmarterMail: mehrere Schwachstellen
CERT-Bund (BSI) meldet mehrere Schwachstellen in SmarterTools SmarterMail mit dem Schweregrad hoch. Die vollständige Beschreibung mit betroffenen Versionen und empfohlenen Maßnahmen steht beim CERT-B…
alerts.neonotu.com
October 12, 2026 at 5:08 PM
euvd-bot.bsky.social
🚨 EUVD-2026-95888
📊 5.3/10
🏢 SmarterTools

📝 SmarterMail before build 9777 contains a stored mutation cross-site scripting vulnerability that allows remote attackers to inject executable script ...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-95888

#cybersecurity #infosec #cve #euvd
October 9, 2026 at 8:04 PM
euvd-bot.bsky.social
🚨 EUVD-2026-95887
📊 8.6/10
🏢 SmarterTools

📝 SmarterMail before build 9777 contains a remote code execution vulnerability that allows an attacker holding a SysAdmin-scoped access token to bypass...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-95887

#cybersecurity #infosec #cve #euvd
October 9, 2026 at 8:05 PM
euvd-bot.bsky.social
🚨 EUVD-2026-95890
📊 8.7/10
🏢 SmarterTools

📝 SmarterMail before build 9777 contains a privilege escalation vulnerability where JWT access and refresh tokens embed a role claim at issuance that i...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-95890

#cybersecurity #infosec #cve #euvd
October 9, 2026 at 8:04 PM
neonotu.bsky.social
🟠 HOCH · SmarterTools SmarterMail: mehrere Schwachstellen

CERT-Bund (BSI)
SmarterTools SmarterMail: mehrere Schwachstellen
CERT-Bund (BSI) meldet mehrere Schwachstellen in SmarterTools SmarterMail mit dem Schweregrad hoch. Die vollständige Beschreibung mit betroffenen Versionen und empfohlenen Maßnahmen steht beim CERT-B…
www.neonotu.com
September 7, 2026 at 4:08 PM
neonotu.bsky.social
🟠 HOCH · SmarterTools SmarterMail: mehrere Schwachstellen

CERT-Bund (BSI)
SmarterTools SmarterMail: mehrere Schwachstellen
CERT-Bund (BSI) meldet mehrere Schwachstellen in SmarterTools SmarterMail mit dem Schweregrad hoch. Die vollständige Beschreibung mit betroffenen Versionen und empfohlenen Maßnahmen steht beim CERT-B…
www.neonotu.com
August 28, 2026 at 1:08 PM
bolhasec.com
Notícia da SecurityWeek

"Critical SmarterMail Vulnerability Exploited in Ransomware Attacks" #bolhasec
Critical SmarterMail Vulnerability Exploited in Ransomware Attacks
CISA warns of a new SmarterTools SmarterMail vulnerability exploited by ransomware groups for unauthenticated RCE.
www.securityweek.com
February 27, 2026 at 5:30 PM
bolhasec.com
Notícia da SecurityWeek

"SmarterTools Hit by Ransomware via Vulnerability in Its Own Product" #bolhasec
SmarterTools Hit by Ransomware via Vulnerability in Its Own Product
SmarterTools says the Warlock ransomware group hacked it through a VM running an unpatched SmarterMail server.
www.securityweek.com
February 25, 2026 at 1:30 AM
bolhasec.com
Notícia da BleepingComputer

"Hackers breach SmarterTools network using flaw in its own software" #bolhasec
Hackers breach SmarterTools network using flaw in its own software
SmarterTools confirmed last week that the Warlock ransomware gang breached its network after compromising an email system, but did not impact business applications or account data.
www.bleepingcomputer.com
February 17, 2026 at 1:30 AM
bolhasec.com
Notícia da BleepingComputer

"SmarterMail auth bypass flaw now exploited to hijack admin accounts" #bolhasec
SmarterMail auth bypass flaw now exploited to hijack admin accounts
Hackers began exploiting an authentication bypass vulnerability in SmarterTools' SmarterMail email server and collaboration tool that allows resetting admin passwords.
www.bleepingcomputer.com
January 25, 2026 at 1:30 PM
illofsec.bsky.social
SmarterMail fixes critical vulnerabilities
thehackernews.com/2026/01/smar...
SmarterMail Fixes Critical Unauthenticated RCE Flaw with CVSS 9.3 Score
SmarterTools fixed critical SmarterMail flaws, including CVSS 9.3 unauthenticated RCE and NTLM relay bugs, urging users to update immediately.
thehackernews.com
January 30, 2026 at 11:04 PM
eabourland.bsky.social
Hi. Longtime smartermail user and admin here. I just happened on your post. Rather than "crappy", the latest versions of smartermail are useful, robust, well-organized, and they are always improving the product.

There is a very active and friendly community at portal.smartertools.com/community/
Community Threads - SmarterTools
portal.smartertools.com
February 9, 2025 at 4:30 AM
ethicalhackingnews.bsky.social
#Cybersecurity #ITSecurity #InfoSec #CyberNews #Hacking #EthicalHackingNews
SmarterTools Discovers SmarterMail Server Breach: A Cautionary Tale of Unpatched Software Vulnerabilities
www.ethicalhackingnews.com
February 19, 2026 at 5:24 AM
ethicalhackingnews.bsky.social
#Cybersecurity #ITSecurity #InfoSec #CyberNews #Hacking #EthicalHackingNews
U.S. CISA Adds SmarterTools SmarterMail and React Native Community CLI Flaws to Its Known Exploited Vulnerabilities Catalog: A Growing Concern for Cybersecurity
www.ethicalhackingnews.com
February 6, 2026 at 10:40 AM
bleepingcomputer.com.web.brid.gy
SmarterMail auth bypass flaw now exploited to hijack admin accounts
Hackers began exploiting an authentication bypass vulnerability in SmarterTools' SmarterMail email server and collaboration tool that allows resetting admin passwords. [...]
www.bleepingcomputer.com
January 22, 2026 at 7:23 PM
it-connect.bsky.social
🚨 Quand une faille interne ouvre la porte aux cybercriminels…

L’éditeur SmarterTools piraté à cause d’une faille dans son propre logiciel 🤔

👉 Découvrez les détails de cette attaque :
www.it-connect.fr/lediteur-sma...

#Cybersécurité #Ransomware #Warlock #Cyberattaque
SmarterTools piraté à cause d'une faille dans son propre logiciel
En exploitant une faille dans le logiciel SmarterMail, les pirates du gang Warlock sont parvenus à s'introduire sur les serveurs de l'éditeur SmarterTools.
www.it-connect.fr
February 10, 2026 at 12:13 PM
ahmandonk.bsky.social
📰 Peretas Bobol Jaringan SmarterTools Lewat Celah di Perangkat Lunaknya Sendiri

👉 Baca artikel lengkap di sini: https://ahmandonk.com/2026/02/10/peretasan-smartertools-celah-smartermail/

#keama#keamananr#sibern#kerentanano#ransomwaree#serverl#emailt#smartermailt#smartertools
February 10, 2026 at 6:11 AM
thehackerwire.bsky.social
🟠 CVE-2026-7807 - High (8.1)

SmarterTools SmarterMail builds prior to 9560 contain a local file inclusion vulnerability in the...

https://www.thehackerwire.com/vulnerability/CVE-2026-7807/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack
CVE-2026-7807 - High
May 8, 2026 at 8:24 PM
it4intserver.bsky.social
iT4iNT SERVER CSA Issues Alert on Critical SmarterMail Bug Allowing Remote Code Execution VDS VPS Cloud #CyberSecurity #CVE2025 #Vulnerability #RemoteCodeExecution #SmarterMail
CSA Issues Alert on Critical SmarterMail Bug Allowing Remote Code Execution
The Cyber Security Agency of Singapore (CSA) has issued a bulletin warning of a maximum-severity security flaw in SmarterTools SmarterMail email software that could be exploited to achieve remote code execution. The vulnerability, tracked as CVE-2025-52691, carries a CVSS score of 10.0. It relates to a case of arbitrary file upload that could enable code execution without requiring any
dlvr.it
December 30, 2025 at 5:53 PM
sctocs.bsky.social
The Warlock ransomware group breached SmarterTools by exploiting an unpatched SmarterMail server, affecting internal Windows systems. Customer apps and data were safe, but this serves as a strong reminder to keep all servers updated and segmented.

👉 Read more: sctocs.com/warlock-rans...
Warlock Ransomware Breaches SmarterTools Via Unpatched SmarterMail Server - SCtoCS
Warlock ransomware has breached SmarterTools by exploiting an unpatched SmarterMail server, highlighting the risks of delayed security updates.
sctocs.com
February 10, 2026 at 6:49 PM
sctocs.bsky.social
CSA warns of a critical SmarterMail vulnerability that allows remote code execution (RCE) — update your systems now!
🔗 sctocs.com/csa-warns-of...
CSA Warns Of Critical SmarterMail Bug Allowing Remote Code Execution - SCtoCS
The Cyber Security Agency of Singapore (CSA) has issued an urgent alert regarding a critical security flaw in SmarterTools’ SmarterMail email platform. The
sctocs.com
January 1, 2026 at 6:08 PM
vulnerability-lookup.social.circl.lu.ap.brid.gy
You can now share your thoughts on vulnerability CVE-2025-52691 in Vulnerability-Lookup:
https://vulnerability.circl.lu/vuln/CVE-2025-52691

SmarterTools - SmarterMail

#vulnerabilitylookup #vulnerability #cybersecurity #bot
cvelistv5 - CVE-2025-52691
Vulnerability-Lookup - Fast vulnerability lookup correlation from different sources.
vulnerability.circl.lu
December 29, 2025 at 2:46 AM
theunicornxxl.bsky.social
Jetzt updaten! Angreifer übernehmen SmarterMail-Instanzen als Admin | heise online

heise.de/-11163471
Jetzt updaten! Angreifer übernehmen SmarterMail-Instanzen als Admin
Drei kritische Sicherheitslücken bedrohen SmarterTools E-Mail-Software SmarterMail. Ein Sicherheitsupdate ist verfügbar.
heise.de
February 5, 2026 at 7:44 AM
jbhall56.bsky.social
The company's Chief Commercial Officer, Derek Curtis, says that the intrusion occurred on January 29, via a single SmarterMail virtual machine (VM) set up by an employee. www.bleepingcomputer.com/news/securit...
Hackers breach SmarterTools network using flaw in its own software
SmarterTools confirmed last week that the Warlock ransomware gang breached its network after compromising an email system, but did not impact business applications or account data.
www.bleepingcomputer.com
February 10, 2026 at 1:10 PM
campuscodi.risky.biz
-SmarterTools hacked via its own product
-Dutch DPA and European Commission hacked via Ivanti zero-days
-Senegal held for ransom
-state actor behind Signal phishing campaign in Germany
-Flickr 3rd party breach

Podcast: risky.biz/RBNEWS523/
Newsletter: news.risky.biz/risky-bullet...
February 9, 2026 at 9:11 AM