SmarterMail fixed a critical unauthenticated RCE in its email server software. The flaw, CVE ...

Facebook • January 30, 2026

Share: View original

SmarterMail fixed a critical unauthenticated RCE in its email server software. The flaw, CVE-2026-24423 (CVSS 9.3), lets attackers execute OS...

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

SmarterMail Addresses Critical RCE Vulnerability in Email Server Software SmarterMail has patched a critical unauthenticated remote code execution (RCE) vulnerability, identified as CVE-2026-24423, with a CVSS score of 9.3. This flaw allows attackers to execute operating system commands without authentication, potentially compromising affected systems. Users of SmarterMail's email server software are advised to apply the update promptly. 2 sources 56

Extracted Entities

Attack Types (1)

Zero-day Exploit

CVEs (1)