CVE-2025-52691

SmarterTools SmarterMail Unrestricted Upload of File with Dangerous Type Vulnerability

Smartermail

Successful exploitation of the vulnerability could allow an unauthenticated attacker to upload arbitrary files to any location on the mail server, potentially enabling remote code execution.

29. Dez 2025

Ausgewertete Quellen

• Hinweis
  https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2025-124/
• CISA
  https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-52691
• CISA
  SmarterTools SmarterMail Unrestricted Upload of File with Dangerous Type Vulnerability
• NVD
  CVE-2025-52691
• GitHub
  https://github.com/watchtowrlabs/watchTowr-vs-SmarterMail-CVE-2025-52691?ref=labs.watchtowr.com