CVE-2026-24423 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

SmarterTools SmarterMail versions prior to build 9511 contain an unauthenticated remote code execution vulnerability in the ConnectToHub API method. The attacke…
Critical KEV CVSS: 9.3

CVE-2026-24423

SmarterTools SmarterMail versions prior to build 9511 contain an unauthenticated remote code execution vulnerability in the ConnectToHub API method. The attacker could point the SmarterMail to the malicious HTTP server, which serves the malicious OS command. This command will be executed by the vulnerable application.
Vendor
Smartertools
Product
Smartermail
CWE
CWE-306
Yayın Tarihi
2026-01-23 17:16:13
Güncelleme
2026-02-06 16:45:15
Source Identifier
disclosure@vulncheck.com
KEV Date Added
2026-02-05

Kategoriler

CWE-306 Smartermail CRITICAL Smartertools 2026

Referanslar

https://code-white.com/public-vulnerability-list/#systemadminsettingscontrollerconnecttohub-missing-authentication-in-smartermail https://www.smartertools.com/smartermail/release-notes/current https://www.vulncheck.com/advisories/smartertools-smartermail-unauthenticated-rce-via-connecttohub-api https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-24423