773 PoCs | 119 CISA KEV

tag

Smartermail

SmarterMail Auth Bypass via Password Reset to Pre-Auth RCE (CVE-2025-52691 / WT-2026-0001) KEV RW EPSS 86%

CVE-2025-52691 web Patched

CVE-2025-52691webCRITICAL 10Patched2026-07-06SmarterMail Unauthenticated Admin Password Reset (CVE-2026-0001 / WT-2026-0001)

CVE-2026-0001 (tracked publicly as WT-2026-0001) web Patched

CVE-2026-0001webCRITICAL 9Patched2026-07-05SmarterMail ConnectToHub Unauthenticated SSRF Leading to Remote Command Execution — CVE-2026-24423 KEV RW EPSS 88%

CVE-2026-24423 web Unverified

CVE-2026-24423webCRITICALUnverified2026-07-05SmarterMail Admin Password-Reset Authentication Bypass (CVE-2026-23760) KEV RW EPSS 96%

CVE-2026-23760 web Patched

CVE-2026-23760webCRITICAL 9.3Patched2026-07-05