Smartermail Build 9777 Sysadmin Remote Code Execution Via Volume Mount

Back www.vulncheck.com

Smartermail Build 9777 Sysadmin Remote Code Execution Via Volume Mount

www.vulncheck.com • October 9, 2026

Share: View original

VulnCheck Advisory: SmarterMail < Build 9777 SysAdmin Remote Code Execution via Volume Mount

Ready to get Started?

Vulnerability Prioritization Prioritize vulnerabilities that matter based on the threat landscape and defer vulnerabilities that don't.

Early Warning System Real-time alerting of changes in the vulnerability landscape so that you can take action before the attacks start.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

CVE-2026-104082: SmarterMail Remote Code Execution Vulnerability A remote code execution vulnerability, CVE-2026-104082, has been identified in SmarterMail versions prior to build 9777. The flaw allows attackers with SysAdmin access tokens to bypass security controls and execute malicious scripts, potentially gaining SYSTEM-level privileges. Organizations with internet-reachable mail servers are particularly at risk, especially if administrative interfaces or tokens are widely accessible. Successful exploitation could lead to significant disruption and unauthorized access to sensitive data. As of today, no active exploitation has been confirmed, but the vulnerability is rated as high severity with a CVSS score of 8.6. Immediate patching is recommended to mitigate risks. 1 sources 63

Extracted Entities

Attack Types (1)

Remote Code Execution