Securityweek

Ransomware Exploits Critical SmarterMail Vulnerability CVE-2026-24423

First seen 6 Feb 2026, 18:16 UTC • Thehackernews

+22 •68.6

Article Content

Include sub-articles 1 / 1

Browse articles

ThreatCluster

A critical vulnerability in SmarterTools' SmarterMail, identified as CVE-2026-24423, is being actively exploited in ransomware attacks. The flaw allows unauthenticated remote code execution via malicious HTTP requests, affecting users of the email and collaboration server. CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on February 5, 2026.

How this analysis works

Attack Flow

18 entities, 33 inferred relationships (STIX 2.1).

Technique (5)

Malware
Ransomware
Zero-day Exploit
T1190 - Exploit Public-Facing Application
T1203 - Exploitation for Client Execution

Organization (6)

CISA
CODE White
FortiGuard Labs
SmarterTools
VulnCheck
WatchTowr

Vulnerability (4)

CVE-2025-52691
CVE-2026-23760
CVE-2026-24423
SmarterMail Vulnerability

Affected Platform (3)

React Native Community CLI
SmarterMail
Windows

Relationships

CVE-2025-52691 targets React Native Community CLI
CVE-2025-52691 targets SmarterMail
CVE-2025-52691 targets Windows
CVE-2026-23760 targets React Native Community CLI
CVE-2026-23760 targets SmarterMail
CVE-2026-23760 targets Windows
CVE-2026-24423 targets React Native Community CLI
CVE-2026-24423 targets SmarterMail
CVE-2026-24423 targets Windows
SmarterMail Vulnerability targets React Native Community CLI
SmarterMail Vulnerability targets SmarterMail
SmarterMail Vulnerability targets Windows
Malware targets React Native Community CLI
Malware targets SmarterMail
Malware targets Windows
Ransomware targets React Native Community CLI
Ransomware targets SmarterMail
Ransomware targets Windows
Zero-day Exploit targets React Native Community CLI
Zero-day Exploit targets SmarterMail
Zero-day Exploit targets Windows
T1190 - Exploit Public-Facing Application targets React Native Community CLI
T1190 - Exploit Public-Facing Application targets SmarterMail
T1190 - Exploit Public-Facing Application targets Windows
T1203 - Exploitation for Client Execution targets React Native Community CLI
T1203 - Exploitation for Client Execution targets SmarterMail
T1203 - Exploitation for Client Execution targets Windows
CVE-2025-52691 related to CISA
CVE-2025-52691 related to CODE White
CVE-2025-52691 related to FortiGuard Labs
CVE-2025-52691 related to SmarterTools
CVE-2025-52691 related to VulnCheck
CVE-2025-52691 related to WatchTowr

Continue Reading

Cisco Fixes Critical AsyncOS Vulnerability Under Attack FortiWeb WAF Vulnerability Enables Full Admin Control Exploitation Resurgence of KV Botnet Linked to Chinese State Actors Active Exploitation of N-able N-central Authentication Bypass Vulnerability Critical Vulnerabilities in TP-Link Archer Routers Expose Users to Attacks Record Highs in Industrial Control System Vulnerabilities Reported

Ransomware Exploits Critical SmarterMail Vulnerability CVE-2026-24423

Article Content

More articles in this cluster

Attack Flow

Defensive Countermeasures

Extracted Entities

Continue Reading