SmarterMail - Remote Code Execution

SmarterTools SmarterMail build 9511 contains an unauthenticated remote code execution caused by malicious OS command execution via ConnectToHub API method, letting remote attackers execute arbitrary commands, exploit requires no authentication. id: CVE-2026-24423 info: name: SmarterMail - Remote...

SmarterMail-CVE-2026-24423

SmarterMail ConnectToHub RCE Un exploit basado en Python para CVE-2026-24423 , una vulnerabilidad de Ejecución Remota de Código no autenticada en la funcionalidad ConnectToHub de SmarterTools SmarterMail. Uso previsto: Solo pruebas de seguridad autorizadas, CTFs, laboratorios de Hack The Box y...

CVE-2026-24423

creationtimestamp| type| source ---|---|--- 2026-01-23 20:48:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3md4l65p5mq2c 2026-01-28 03:57:16+00:00| seen| https://bsky.app/profile/cyber-news-fi.bsky.social/post/3mdhey7u2rv2x 2026-01-28 19:14:51+00:00| seen|...