Critical (CVSS 10) tagged CVE-2025-52691 affecting SmarterMail software

by runtimepanicon 12/30/2025, 8:38 PMwith 1 comments

by runtimepanicon 12/30/2025, 8:38 PM

SmarterMail Build 9406 and earlier is vulnerable to arbitrary file upload. An unauthenticated attacker can upload arbitrary files to any location on the mail server, potentially enabling remote code execution.