CVE-2026-23760

🗓️ 22 Jan 2026 14:35:17Reported by VulnCheckType

cve🔗 web.nvd.nist.gov📰️ 11 Media mentions👁 69 Views🌐 WEB

Unauthenticated users can reset admin passwords via force-reset-password in SmarterMail before 9511.

Reporter	Title	Published	Views	Family All 25
GithubExploit	Exploit for CVE-2026-23760	24 Jan 202612:30	–	githubexploit
ATTACKERKB	CVE-2026-23760	22 Jan 202614:35	–	attackerkb
BDU FSTEC	The vulnerability in the application programming interface of the SmarterTools SmarterMail mail server allows a malicious individual to update the administrator password to the default value and gain unauthorized access to the server.	26 Jan 202600:00	–	bdu_fstec
Circl	CVE-2026-23760	22 Jan 202615:50	–	circl
CISA KEV Catalog	SmarterTools SmarterMail Authentication Bypass Using an Alternate Path or Channel Vulnerability	26 Jan 202600:00	–	cisa_kev
CISA	CISA Adds Five Known Exploited Vulnerabilities to Catalog	26 Jan 202612:00	–	cisa
CNNVD	SmarterTools SmarterMail security vulnerability	22 Jan 202600:00	–	cnnvd
Cvelist	CVE-2026-23760 SmarterTools SmarterMail < Build 9511 Authentication Bypass via Password Reset API	22 Jan 202614:35	–	cvelist
EUVD	EUVD-2026-4143	22 Jan 202614:35	–	euvd
Microsoft Secure	Storm-1175 focuses gaze on vulnerable web-facing assets in high-tempo Medusa ransomware operations	6 Apr 202616:00	–	mssecure

NVD

Vulners

CNA

Node

smartertools smartermailRange<100.0.9511

[
  {
    "defaultStatus": "unaffected",
    "product": "SmarterMail",
    "vendor": "SmarterTools",
    "versions": [
      {
        "lessThan": "100.0.9511",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
code-white	www.code-white.com/public-vulnerability-list/
smartertools	www.smartertools.com/smartermail/release-notes/current
vulncheck	www.vulncheck.com/advisories/smartertools-smartermail-authentication-bypass-via-password-reset-api
labs	www.labs.watchtowr.com/attackers-with-decompilers-strike-again-smartertools-smartermail-wt-2026-0001-auth-bypass/
cisa	www.cisa.gov/known-exploited-vulnerabilities-catalog
huntress	www.huntress.com/blog/smartermail-account-takeover-leading-to-rce

Parameter	Position	Path	Description	CWE
IsSysAdmin	request body	/api/v1/auth/force-reset-password	Authentication bypass by forcing admin password reset via force-reset-password endpoint with anonymous access.	CWE-288
OldPassword	request body	/api/v1/auth/force-reset-password	Authentication bypass by forcing admin password reset via force-reset-password endpoint with anonymous access.	CWE-288
Username	request body	/api/v1/auth/force-reset-password	Authentication bypass by forcing admin password reset via force-reset-password endpoint with anonymous access.	CWE-288
NewPassword	request body	/api/v1/auth/force-reset-password	Authentication bypass by forcing admin password reset via force-reset-password endpoint with anonymous access.	CWE-288
ConfirmPassword	request body	/api/v1/auth/force-reset-password	Authentication bypass by forcing admin password reset via force-reset-password endpoint with anonymous access.	CWE-288

17 Jun 2026 10:22Current

6.3Medium risk

Vulners AI Score6.3

CVSS 3.19.8

CVSS 49.3

EPSS0.96268

SSVC