Exploit for CVE-2026-23760

🗓️ 24 Jan 2026 12:30:34Reported by MaxMnMlType

SmarterMail password reset bypass enables administrator takeover and remote code execution on builds before 9511.

Reporter	Title	Published	Views	Family All 25
ATTACKERKB	CVE-2026-23760	22 Jan 202614:35	–	attackerkb
BDU FSTEC	The vulnerability in the application programming interface of the SmarterTools SmarterMail mail server allows a malicious individual to update the administrator password to the default value and gain unauthorized access to the server.	26 Jan 202600:00	–	bdu_fstec
Circl	CVE-2026-23760	22 Jan 202615:50	–	circl
CISA KEV Catalog	SmarterTools SmarterMail Authentication Bypass Using an Alternate Path or Channel Vulnerability	26 Jan 202600:00	–	cisa_kev
CISA	CISA Adds Five Known Exploited Vulnerabilities to Catalog	26 Jan 202612:00	–	cisa
CNNVD	SmarterTools SmarterMail security vulnerability	22 Jan 202600:00	–	cnnvd
CVE	CVE-2026-23760	22 Jan 202614:35	–	cve
Cvelist	CVE-2026-23760 SmarterTools SmarterMail < Build 9511 Authentication Bypass via Password Reset API	22 Jan 202614:35	–	cvelist
EUVD	EUVD-2026-4143	22 Jan 202614:35	–	euvd
Microsoft Secure	Storm-1175 focuses gaze on vulnerable web-facing assets in high-tempo Medusa ransomware operations	6 Apr 202616:00	–	mssecure