SmarterMail < 100.0.9526 XSS (CVE-2026-26930)

The version of SmarterTools SmarterMail installed on the remote host is prior to 100.0.9526. It is, therefore, affected by a cross-site scripting vulnerability: - SmarterTools SmarterMail before build 9526 allows XSS via MAPI requests. CVE-2026-26930 Note that Nessus has not tested for this issue...

CVE-2026-26930

CVE-2026-26930 affects SmarterTools SmarterMail prior to version 9526, where XSS is possible via MAPI requests. The CVSS v3.1 base score is 7.2 (HIGH) with network attack vector, no privileges required, user interaction not required, and a changed scope. Patch guidance is to upgrade to 9526 or la...

CISA Adds Two Known Exploited Vulnerabilities to Catalog

CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities KEV Catalog, based on evidence of active exploitation. CVE-2025-11953link is external React Native Community CLI OS Command Injection Vulnerability CVE-2026-24423link is external SmarterTools SmarterMail Missing...

CVE-2026-24423 SmarterTools SmarterMail < Build 9511 Unauthenticated RCE via ConnectToHub API

SmarterTools SmarterMail versions prior to build 9511 contain an unauthenticated remote code execution vulnerability in the ConnectToHub API method. The attacker could point the SmarterMail to the malicious HTTP server, which serves the malicious OS command. This command will be executed by the...

SmarterTools SmarterMail security vulnerability

SmarterTools SmarterMail is a set of email server software developed by SmarterTools Corporation. This software supports features such as spam filtering, data statistics, and Simple Mail Transfer Protocol SMTP authentication. Previous versions of SmarterTools SmarterMail, including the 9511...

SmarterTools SmarterTrack security vulnerabilities

SmarterTools SmarterTrack is a customer service software developed by SmarterTools Corporation. It can improve customer service and reduce support costs. Version 7922 of SmarterTools SmarterTrack contains a security vulnerability. This vulnerability stems from the Chat Management search form, whi...

CVE-2020-36926

SmarterTrack 7922 is affected by an information disclosure vulnerability in the Chat Management search form. The issue allows unauthenticated access to the /Management/Chat/frmChatSearch.aspx endpoint, exposing agents’ first and last names and their unique identifiers. Reported details consistent...

CVE-2009-4995

Cross-site scripting XSS vulnerability in frmTickets.aspx in SmarterTools SmarterTrack before 4.0.3504 allows remote attackers to inject arbitrary web script or HTML via the email address field. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

SmarterTools SmarterMail Detection Consolidation

Consolidation of SmarterTools SmarterMail detections. SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only include"pluginfeedinfo.inc"; if descripti...

EUVD-2011-2145

Malware in sbrugna...

EUVD-2009-4957

Malware in sbrugna...

EUVD-2011-4668

Malware in sbrugna...

EUVD-2008-0879

Malware in sbrugna...

EUVD-2021-19090

Malware in sbrugna...

EUVD-2011-2147

Malware in sbrugna...

EUVD-2019-16756

Malware in sbrugna...

EUVD-2011-2140

Malware in sbrugna...

EUVD-2011-2146

Malware in sbrugna...

EUVD-2011-2148

Malware in sbrugna...

EUVD-2011-2143

Malware in sbrugna...