Smartertools — PoC Archivehttps://poc.intelseclab.com/tags/smartertools/Latest proof-of-concept entries.Hugoen-usMon, 06 Jul 2026 00:00:00 +0000SmarterMail Auth Bypass via Password Reset to Pre-Auth RCE (CVE-2025-52691 / WT-2026-0001)https://poc.intelseclab.com/pocs/web/2026-07-06_cve-2025-52691-smartermail-auth-bypass-rce/Mon, 06 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-06_cve-2025-52691-smartermail-auth-bypass-rce/Critical severity (CVSS 10) — web · CVE-2025-52691. Status: Weaponized. Affects: SmarterMail (SmarterTools webmail/mail server). Tags: smartermail, smartertools, webmail, authentication-bypass, password-reset, rce, volume-mounts, pre-auth, watchtowr, python.webCriticalsmartermailsmartertoolswebmailauthentication-bypasspassword-resetrcevolume-mountspre-authwatchtowrpythonSmarterMail Unauthenticated Admin Password Reset (CVE-2026-0001 / WT-2026-0001)https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-0001-smartermail-password-reset/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-0001-smartermail-password-reset/Critical severity (CVSS 9) — web · CVE-2026-0001 (tracked publicly as WT-2026-0001). Status: PoC. Affects: SmarterTools SmarterMail (webmail/admin control panel), typically on port 9998. Tags: smartermail, auth-bypass, password-reset, email-server, unauthenticated, rce-chain, smartertools, api.webCriticalsmartermailauth-bypasspassword-resetemail-serverunauthenticatedrce-chainsmartertoolsapi