Fresh SmarterMail Flaw Exploited for Admin Access

Back Feeds.Feedburner

Fresh SmarterMail Flaw Exploited for Admin Access

Feeds.Feedburner •Ionut Arghire • January 23, 2026

Share: View original

The exploitation of the authentication bypass vulnerability started two days after patches were released.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Ransomware Exploits Critical SmarterMail Vulnerability CVE-2026-24423 A critical vulnerability in SmarterTools' SmarterMail, identified as CVE-2026-24423, is being actively exploited in ransomware attacks. The flaw allows unauthenticated remote code execution via malicious HTTP requests, affecting users of the email and collaboration server. CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on February 5, 2026. 34 sources 69

Extracted Entities

Platforms (1)