References https://avd.aliyun.com/detail?id=AVD-2023-4414 https://github.com/ibaiw/2023Hvv/blob/main/%E7%99%BE%E5%8D%93Smart%20S85F%E7%AE%A1%E7%90%86%E7%B3%BB%E7%BB%9F%20%E8%BF%9C%E7%A8%8B%E5%91%BD%E4%BB%A4%E6%89%A7%E8%A1%8C.md https://github.com/RCEraser/cve/blob/main/S85F.md https://www.fortiguard.com/encyclopedia/ips/54868 https://vuldb.com/submit/185751 https://nvd.nist.gov/vuln/detail/CVE-2023-4414 https://github.com/advisories/GHSA-mh56-636p-hcp5 https://avd.aliyun.com/detail?id=AVD-2023-4739
Related Vulnerabilities旭辰資訊|SmartIT Desktop Manager - 存在4個漏洞Apache Kafka UI /smartfilters/testexecutions 代码执行漏洞(CVE-2026-5562)PoCCVE-2026-24423: SmarterMail - Remote Code Execution易宝 OA /SmartTradeScan/StockTake/SetScanQty txtBoxNo SQL 注入漏洞太友 QSmart Audit 管理系统存在弱口令PoCSmarterMail ConnectToHub /api/v1/settings/sysadmin/connect-to-hub 命令执行漏洞(CVE-2026-24423)SmarterTools SmarterMail 远程代码执行漏洞(CVE-2026-24423)SmarterTools SmarterMail 权限管理不当漏洞PoCCVE-2026-23760: SmarterTools SmarterMail - Admin Password ResetPoCSmarterMail /api/v1/auth/force-reset-password 权限绕过漏洞SmarterMail 存在任意文件上传漏洞SmarterMail 存在任意密码重置漏洞