CYFIRMA Research

CYFIRMA Research: CVE-2026-23760 – SmarterTools SmarterMail Authentication Bypass Vulnerability

CYFIRMA

Use Left/Right to seek, Home/End to jump to start or end. Hold shift to jump forward or backward.

0:00 | 7:56

Critical Alert: CVE-2026-23760 – SmarterMail Pre-Auth Bypass Leading to Full System Compromise

Organizations running SmarterTools SmarterMail email servers—widely deployed across SMBs, MSPs, educational institutions, and healthcare environments—must take immediate action. This actively exploited authentication bypass vulnerability allows unauthenticated attackers to reset system administrator passwords and gain complete control over email infrastructure without any credentials.

ACTIVE EXPLOITATION CONFIRMED – Attacks began just 2 DAYS after patch release
~10000+ vulnerable instances identified globally
Added to CISA's Known Exploited Vulnerabilities (KEV) catalog
CVSS 9.8 Critical – Direct path to SYSTEM/root-level RCE

Link to the Research Report: CVE-2026-23760 – SmarterTools SmarterMail Authentication Bypass Vulnerability - CYFIRMA

#CyberSecurity #CVE202623760 #SmarterMail #AuthenticationBypass #ThreatIntel #ExternalThreatLandscapeManagement #VulnerabilityAlert #EmailSecurity #CriticalInfrastructure #CYFIRMA #CISA_KEV #RCE #PreAuthExploit


https://www.cyfirma.com/