CVE-2026-24423 - Vulnerability Details

Related Threat Clusters

• Ransomware Exploits Critical SmarterMail Vulnerability CVE-2026-24423

  A critical vulnerability in SmarterTools' SmarterMail, identified as CVE-2026-24423, is being actively exploited in ransomware attacks. The flaw allows unauthenticated remote code execution via malicious HTTP requests,…

  35 articles · Updated February 6, 2026
• SmarterMail Addresses Critical RCE Vulnerability in Email Server Software

  SmarterMail has patched a critical unauthenticated remote code execution (RCE) vulnerability, identified as CVE-2026-24423, with a CVSS score of 9.3. This flaw allows attackers to execute operating system commands…

  2 articles · Updated January 30, 2026

Recent Intelligence Reports

• SmarterMail authentication bypass vulnerability exploited more than 1000 times in two weeks — Cyberdaily.Au · February 10, 2026
• CISA warns of SmarterMail RCE flaw used in ransomware attacks — Bleepingcomputer · February 6, 2026
• CISA warns of SmarterMail RCE flaw used in ransomware attacks — Bleepingcomputer · February 6, 2026
• Ransomware attackers are exploiting critical SmarterMail vulnerability (CVE-2026-24423) — Feeds2.Feedburner · February 6, 2026
• SmarterTools patches critical SmarterMail flaw allowing code execution — Securityaffairs · January 30, 2026
• SmarterTools patches critical SmarterMail flaw allowing code execution — Securityaffairs.Co · January 30, 2026
• SmarterMail fixed a critical unauthenticated RCE in its email server software. The flaw, CVE ... — Facebook · January 30, 2026

Related Entities