CISA Warns of Actively Exploited SmarterTools SmarterMail Vulnerability Used in ...

Cyberpress • February 6, 2026

Share: View original

CISA confirmed that active exploitation has been observed in the wild, with attackers leveraging the flaw to gain remote code execution on ...

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Ransomware Exploits Critical SmarterMail Vulnerability CVE-2026-24423 A critical vulnerability in SmarterTools' SmarterMail, identified as CVE-2026-24423, is being actively exploited in ransomware attacks. The flaw allows unauthenticated remote code execution via malicious HTTP requests, affecting users of the email and collaboration server. CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on February 5, 2026. 34 sources 69

Extracted Entities

MITRE ATT&CK (1)

T1203 - Exploitation for Client Execution

Platforms (1)

Vulnerabilities (1)

SmarterMail Vulnerability