References https://nvd.nist.gov/vuln/detail/CVE-2025-10204 https://avd.aliyun.com/detail?id=AVD-2025-10204 https://cve.imfht.com/detail/CVE-2025-10204 https://github.com/projectdiscovery/nuclei-templates/issues/12884 https://app.opencve.io/cve/CVE-2025-10204 https://cve.imfht.com/poc_detail/55ae4ef1f3f21242c1f4dc10c41861a9acb886e9 https://pentest-tools.com/vulnerabilities-exploits/ac-smart-ii-authentication-bypass_28210 https://vuldb.com/pt/?id.323872
Related Vulnerabilities旭辰資訊|SmartIT Desktop Manager - 存在4個漏洞PoCCVE-2020-10204: Sonatype Nexus Repository Manager 3 - Remote Code ExecutionApache Kafka UI /smartfilters/testexecutions 代码执行漏洞(CVE-2026-5562)PoCCVE-2026-24423: SmarterMail - Remote Code Execution易宝 OA /SmartTradeScan/StockTake/SetScanQty txtBoxNo SQL 注入漏洞太友 QSmart Audit 管理系统存在弱口令PoCSmarterMail ConnectToHub /api/v1/settings/sysadmin/connect-to-hub 命令执行漏洞(CVE-2026-24423)SmarterTools SmarterMail 远程代码执行漏洞(CVE-2026-24423)SmarterTools SmarterMail 权限管理不当漏洞PoCCVE-2026-23760: SmarterTools SmarterMail - Admin Password ResetPoCSmarterMail /api/v1/auth/force-reset-password 权限绕过漏洞SmarterMail 存在任意文件上传漏洞