Lucene search
+L

2 matches found

OSV
OSV
•added 2026/01/22 3:16 p.m.•12 views

CVE-2026-23760

SmarterTools SmarterMail versions prior to build 9511 contain an authentication bypass vulnerability in the password reset API. The force-reset-password endpoint permits anonymous requests and fails to verify the existing password or a reset token when resetting system administrator accounts. An...

9.8CVSS6AI score0.96544EPSS
SaveExploits3References6
attackerkb
attackerkb
•added 2026/01/22 2:35 p.m.•11 views

CVE-2026-23760

SmarterTools SmarterMail versions prior to build 9511 contain an authentication bypass vulnerability in the password reset API. The force-reset-password endpoint permits anonymous requests and fails to verify the existing password or a reset token when resetting system administrator accounts. An...

9.8CVSS6.1AI score0.96544EPSS
SaveIn wildExploits3References6
Rows per page
Query Builder