Back Feeds2.Feedburner

Ransomware attackers are exploiting critical SmarterMail vulnerability (CVE-2026-24423)

Feeds2.Feedburner •Zeljka Zorz • February 6, 2026

For the third time in two weeks, CISA added a vulnerability (CVE-2026-24423) affecting SmarterTools’ SmarterMail email and collaboration server to its Known Exploited Vulnerabilities catalog, and this one is being exploited in ransomware attacks. A glut of SmarterMail vulnerabilities On January 26, the US cybersecurity agency listed CVE-2025-52691 (a unrestricted upload of file with dangerous type vulnerability) and CVE-2026-23760 (an authentication bypass flaw) affecting SmarterMail in the KEV catalog. WatchTowr researchers analyzed and shared technical … More →

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Ransomware Exploits Critical SmarterMail Vulnerability CVE-2026-24423 A critical vulnerability in SmarterTools' SmarterMail, identified as CVE-2026-24423, is being actively exploited in ransomware attacks. The flaw allows unauthenticated remote code execution via malicious HTTP requests, affecting users of the email and collaboration server. CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on February 5, 2026. 35 sources 69

Extracted Entities

Ransomware attackers are exploiting critical SmarterMail vulnerability (CVE-2026-24423)

The full story

Extracted Entities

Attack Types (1)

CVEs (3)

Platforms (1)