Description
SmarterTools SmarterMail 权限管理不当漏洞
SmarterTools SmarterMail 权限管理不当漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://zhuanlan.zhihu.com/p/1997751124111942608
https://developer.cloud.tencent.com/article/2631609
https://www.secrss.com/articles/87398
https://cn-sec.com/archives/4951131.html
https://www.cyfirma.com/research/cve-2026-23760-smartertools-smartermail-authentication-bypass-vulnerability/
https://labs.watchtowr.com/attackers-with-decompilers-strike-again-smartertools-smartermail-wt-2026-0001-auth-bypass/
https://www.cve.org/CVERecord?id=CVE-2026-23760
https://portal.smartertools.com/community/a97695/critical-sm-build-9511-unauthenticated-admin-account-takeover-possible.aspx
https://nvd.nist.gov/vuln/detail/CVE-2026-24423
https://www.vulncheck.com/advisories/smartertools-smartermail-unauthenticated-rce-via-connecttohub-api