Description
SmarterMail 存在任意文件上传漏洞，攻击者可以通过该漏洞上传恶意文件，获取服务器权限。
SmarterMail 存在任意文件上传漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://cloud.tencent.com/developer/article/2612397
https://www.ihonker.com/thread-34104-1-1.html
https://security.zone.ci/aliyun/ali_nonvd/268885.html
https://fortiguard.fortinet.com/cn/outbreak-alert/smartertools-smartermail-rce
https://ccb.belgium.be/advisories/warning-critical-unauthenticated-arbitrary-file-upload-vulnerability-smartermail-server
https://censys.com/advisory/cve-2025-52691/
https://www.sentinelone.com/vulnerability-database/cve-2025-52691/
https://nvd.nist.gov/vuln/detail/CVE-2025-52691
https://github.com/yt2w/CVE-2025-52691
https://labs.watchtowrlabs.com/do-smart-people-ever-say-theyre-smart-smartertools-smartermail-pre-auth-rce-cve-2025-52691/
https://rodelllemit.medium.com/replicating-cve-2025-52691-an-rce-via-unauthenticated-arbitrary-file-upload-critical-vulnerability-e6c796270192
https://horizon3.ai/attack-research/vulnerabilities/cve-2025-52691/
https://www.tenable.com/plugins/nessus/297222
https://www.coresecurity.com/core-labs/exploits/smartermail-unauthenticated-arbitrary-file-upload-exploit