Description
SmarterMail 存在任意密码重置漏洞，攻击者可以通过该漏洞重置任意管理员密码，获取服务器权限。
SmarterMail 存在任意密码重置漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://labs.watchtowr.com/attackers-with-decompilers-strike-again-smartertools-smartermail-wt-2026-0001-auth-bypass/
https://cloud.tencent.com/developer/article/2631609
https://zhuanlan.zhihu.com/p/1997751124111942608
https://www.vulncheck.com/advisories/smartertools-smartermail-authentication-bypass-via-password-reset-api
https://www.sentinelone.com/vulnerability-database/cve-2026-23760/
https://www.cyfirma.com/research/cve-2026-23760-smartertools-smartermail-authentication-bypass-vulnerability/
https://nvd.nist.gov/vuln/detail/CVE-2026-23760
https://thehackernews.com/2026/01/smartermail-auth-bypass-exploited-in.html
https://portal.smartertools.com/community/a97712/smartermail-administrator-password-reset-read-this-cve-2026-23760.aspx