CVE Tools
Sign in
Back to feed
Exploited in the wild SmarterMail auth-bypass SmarterTools rce

Attackers With Decompilers Strike Again (SmarterTools SmarterMail WT-2026-0001 Auth Bypass)

watchTowr Labs·By Piotr Bazydlo (@chudyPB)··9 min read

Well, well, well - look what we’re back with.

You may recall that merely two weeks ago, we analyzed CVE-2025-52691 - a pre-auth RCE vulnerability in the SmarterTools SmarterMail email solution with a timeline that is typically reserved for KEV hall-of-famers.

The plot of that story had everything;…

Continue reading on watchTowr Labs

Related coverage

Other stories on the same CVEs
Worried this affects your company?

See what your business actually exposes to the Internet — a free external review, no install, no obligation.

Check my exposure