S
Vendor security profile3 actively exploited CVEs
SmarterTools
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs6
Critical3
CISA KEV3
Public exploit3
Patch rate%83
Avg. CVSS8.5
12-month vulnerability rate
0
1
2
0
0
0
0
0
0
0
0
3
CVE KEV
CVE severity distribution
6toplam CVE
Critical3 (50%)
High2 (33%)
Medium1 (17%)
Patch and exploitation view
%83
Verified patch
%50
CISA KEV
%50
Public exploit
5Patch available
0Partial
1Workaround
0Vendor: no patch
0Unknown
Latest vulnerabilities
8.7
CVE-2026-104084
SmarterMail < Build 9777 Stale JWT Role Claim Privilege Escalation via Refresh Token
S
Patch verifiedEPSS %0
5.3
CVE-2026-104083
SmarterMail < Build 9777 Stored Mutation XSS via MathML Foreign Content
S
Patch verifiedEPSS %0
8.6
CVE-2026-104082
SmarterMail < Build 9777 SysAdmin Remote Code Execution via Volume Mount
S
Patch verifiedEPSS %1
9.3
CVE-2026-24423 Actively exploited
SmarterTools SmarterMail < Build 9511 Unauthenticated RCE via ConnectToHub API
S
Patch verifiedEPSS %88
9.3
CVE-2026-23760 Actively exploited
SmarterTools SmarterMail < Build 9511 Authentication Bypass via Password Reset API
S
Patch verifiedEPSS %97
10.0
CVE-2025-52691 Actively exploited
Unrestricted file upload in Smartertools Smartermail
S
WorkaroundEPSS %86