Hacked: New SmarterTools SmarterMail vulnerability exploited in the wild

Back Cyberdaily.Au

Hacked: New SmarterTools SmarterMail vulnerability exploited in the wild

Cyberdaily.Au • February 6, 2026

Share: View original

The US cyber agency adds a new SmarterMail vulnerability to its known exploited list, alongside a React Native Community CLI RCE bug.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Ransomware Exploits Critical SmarterMail Vulnerability CVE-2026-24423 A critical vulnerability in SmarterTools' SmarterMail, identified as CVE-2026-24423, is being actively exploited in ransomware attacks. The flaw allows unauthenticated remote code execution via malicious HTTP requests, affecting users of the email and collaboration server. CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on February 5, 2026. 35 sources 69

Extracted Entities

Attack Types (1)

Zero-day Exploit

MITRE ATT&CK (1)

T1190 - Exploit Public-Facing Application

Platforms (2)

React Native Community CLI SmarterMail