CVE-2025-52691: Upload Arbitrary Files | LiveThreat CVE Feed

Critical severity · published Dec 29, 2025

CVE-2025-52691

Upload Arbitrary Files

RansomwareIn wildKEV

10.0

CVSS

85.7%

EPSS

Yes

On KEV

Description

Successful exploitation of the vulnerability could allow an unauthenticated attacker to upload arbitrary files to any location on the mail server, potentially enabling remote code execution.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Attack vector

Network

Complexity

Low

Privileges

None

User interaction

None

Confidentiality

High

Integrity

High

Availability

High

Scope

Changed

Exploitation

Is it being used?

Exploit prediction (EPSS)85.7% · higher than 100% of CVEs

Exploited in the wildYes

CISA KEVListed Jan 26, 2026

Federal remediation dueFeb 16, 2026

Ransomware campaign useKnown

Affected products

Which versions

SmarterMail · SmarterTools

SmarterMail versions Build 9406 and earlier · source: vendor, NVD, KEV

In the news

VulnerabilityCritical

[CISA KEV] CVE-2025-52691: SmarterTools SmarterMail - SmarterTools SmarterMail Unrestricted Upload of File with Dangerous Type Vulnerability

SmarterTools SmarterMail contains an unrestricted upload of file with dangerous type vulnerability that could allow an unauthenticated attacker to upload arbitrary files to any location on the mail server, potentially enabling remote code execution.

SMSmarterMailCVE-2025-52691

Jan 26, 2026·CISA KEV

Affected product

SmarterMail

SmarterTools

All SmarterMail CVEs

References

NVD

https://nvd.nist.gov/vuln/detail/CVE-2025-52691

CVE.org

https://www.cve.org/CVERecord?id=CVE-2025-52691

CISA KEV catalogue

https://www.cisa.gov/known-exploited-vulnerabilities-catalog

www.csa.gov.sg

https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2025-124/