SmarterTools SmarterMail Vulnerability Enables Remote Code Execution Attack

Cybersecuritynews •Abinaya • January 9, 2026

A critical pre-authentication remote code execution vulnerability, identified as CVE-2025-52691, has been discovered in SmarterTools’ SmarterMail solution. The flaw received a maximum CVSS score of 10.0, indicating its severe nature and potential impact on affected systems. SmarterTools describes SmarterMail as “a secure, all-in-one business email and collaboration server for Windows and Linux – an affordable […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical SmarterMail Vulnerability Allows Remote Code Execution A critical remote code execution vulnerability, CVE-2025-52691, has been found in SmarterTools' SmarterMail solution. This flaw has a maximum CVSS score of 10.0, indicating its severe potential impact on systems using the software. SmarterMail is marketed as a secure business email and collaboration server for both Windows and Linux platforms. 2 sources 84

Extracted Entities

SmarterTools SmarterMail Vulnerability Enables Remote Code Execution Attack

The full story

Extracted Entities

Attack Types (1)

CVEs (1)

Platforms (2)