Email-Server — PoC Archivehttps://poc.intelseclab.com/tags/email-server/Latest proof-of-concept entries.Hugoen-usSun, 05 Jul 2026 00:00:00 +0000SmarterMail Unauthenticated Admin Password Reset (CVE-2026-0001 / WT-2026-0001)https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-0001-smartermail-password-reset/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-0001-smartermail-password-reset/Critical severity (CVSS 9) — web · CVE-2026-0001 (tracked publicly as WT-2026-0001). Status: PoC. Affects: SmarterTools SmarterMail (webmail/admin control panel), typically on port 9998. Tags: smartermail, auth-bypass, password-reset, email-server, unauthenticated, rce-chain, smartertools, api.webCriticalsmartermailauth-bypasspassword-resetemail-serverunauthenticatedrce-chainsmartertoolsapiSmarterMail Admin Password-Reset Authentication Bypass (CVE-2026-23760)https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-23760-smartermail-auth-bypass/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-23760-smartermail-auth-bypass/Critical severity (CVSS 9.3) — web · CVE-2026-23760. Status: PoC. Affects: SmarterTools SmarterMail. Tags: smartermail, authentication-bypass, password-reset, account-takeover, rce, email-server, watchtowr.webCriticalsmartermailauthentication-bypasspassword-resetaccount-takeoverrceemail-serverwatchtowr