SM
Product
Smartermail
On CISA KEVExploited in the wildRansomware-linked
31
CVEs
3
On KEV
10.0
Max CVSS
3
New 30D
Severity mix
Critical 6High 6Medium 11Low 0
Watch
Add Smartermail to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-104084 | 8.8 | Oct 9 | SmarterMail < Build 9777 Stale JWT Role Claim Privilege Escalation via Refresh Token Affected: before Build 9777 |
| CVE-2026-7807 | 8.8 | May 8 | SmarterTools SmarterMail < Build 9560 Server Local File Inclusion via the /api/v1/report/summary/{type} API Affected: before 100.0.9560 |
| CVE-2019-7212 | 8.2 | Apr 24 | SmarterTools SmarterMail 16.x before build 6985 has hardcoded secret keys Affected: 16.0.6345 before 16.3.6985 |
| CVE-2020-29548 | 8.1 | Aug 17 | An issue was discovered in SmarterTools SmarterMail through 100.0.7537 Affected: through 100.0.7537 |
| CVE-2026-104082 | 7.2 | Oct 9 | SmarterMail < Build 9777 SysAdmin Remote Code Execution via Volume Mount Affected: before Build 9777 |
| CVE-2026-26930 | 7.2 | Feb 16 | SmarterTools SmarterMail before 9526 allows XSS via MAPI requests Affected: before 9526 |
Showing 6