CVE-2025-52691

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

December 29, 2025

Last Seen

July 8, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Critical SmarterMail Vulnerability Allows Remote Code Execution83.7

A critical remote code execution vulnerability, CVE-2025-52691, has been found in SmarterTools' SmarterMail solution. This flaw has a maximum CVSS score of 10.0, indicating its severe potential impact on systems using the software. SmarterMail is marketed as a secure business email and collaboration...

Iranian APT Groups Target Israeli Organizations with Modular C2 Frameworks75.5

In 2026, Iranian APT groups, notably Cavern Manticore and OilRig, have intensified cyber operations against Israeli organizations, primarily in the IT and government sectors. Cavern Manticore employs a modular command-and-control (C2) framework built on a .NET foundation, utilizing various compilati...

Critical SmarterMail Vulnerability Allows Unauthenticated Remote Code Execution72.6

The Cyber Security Agency of Singapore (CSA) has issued a high-priority alert regarding a critical vulnerability in SmarterMail, tracked as CVE-2025-52691. This flaw allows attackers to execute arbitrary code remotely without authentication, affecting organizations using the enterprise email platfor...

Ransomware Exploits Critical SmarterMail Vulnerability CVE-2026-2442368.6

A critical vulnerability in SmarterTools' SmarterMail, identified as CVE-2026-24423, is being actively exploited in ransomware attacks. The flaw allows unauthenticated remote code execution via malicious HTTP requests, affecting users of the email and collaboration server. CISA added this vulnerabil...