UNKNOWNKNOWN EXPLOITEDRANSOMWARE: KNOWN

CVE-2025-52691

SmarterTools SmarterMail Unrestricted Upload of File with Dangerous Type Vulnerability

Published: 2026-01-26
Modified: 2026-07-31
Sources: cisa-kev

Summary

SmarterTools SmarterMail contains an unrestricted upload of file with dangerous type vulnerability that could allow an unauthenticated attacker to upload arbitrary files to any location on the mail server, potentially enabling remote code execution.

References

https://www.cisa.gov/known-exploited-vulnerabilities-catalog

Includes data from the CISA Known Exploited Vulnerabilities catalog.

CVE® is a registered trademark of The MITRE Corporation. CVE content reproduced under the CVE Terms of Use; copyright designation © MITRE.