Critical SmarterMail Vulnerability Exploited in Ransomware Attacks

Back Feeds.Feedburner

Critical SmarterMail Vulnerability Exploited in Ransomware Attacks

Feeds.Feedburner •Ionut Arghire • February 6, 2026

Share: View original

The security defect allows unauthenticated attackers to execute arbitrary code remotely via malicious HTTP requests.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Ransomware Exploits Critical SmarterMail Vulnerability CVE-2026-24423 A critical vulnerability in SmarterTools' SmarterMail, identified as CVE-2026-24423, is being actively exploited in ransomware attacks. The flaw allows unauthenticated remote code execution via malicious HTTP requests, affecting users of the email and collaboration server. CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on February 5, 2026. 34 sources 69

Extracted Entities

Attack Types (1)

MITRE ATT&CK (1)

T1190 - Exploit Public-Facing Application

Platforms (1)