Back to overview

CVE-2025-52691

CRITICAL KEV CISA Exploitation: ACTIVE Ransomware noto
10.0
CVSS 3.1
Description
Successful exploitation of the vulnerability could allow an unauthenticated attacker to upload arbitrary files to any location on the mail server, potentially enabling remote code execution.

Metadata

CVE ID
CVE-2025-52691
State
PUBLISHED
Assigner
CSA
Reserved
2025-06-19 06:04 UTC
Published
2025-12-29 02:15 UTC
Last updated
2026-02-26 16:07 UTC
Primary CWE
CWE-434
CWE-434 Unrestricted Upload of File with Dangerous Type
Vendor / Product
SmarterTools / SmarterMail
Sources
cve.org  ·  NVD

Severity & Metrics

10.0 CRITICAL CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
SSVC — CISA Coordinator
Exploitation
ACTIVE
Automatable
yes
Tech. Impact
total
CISA Known Exploited Vulnerability
Vulnerability name
SmarterTools SmarterMail Unrestricted Upload of File with Dangerous Type Vulnerability
Vendor
SmarterTools
Product
SmarterMail
Added to KEV
2026-01-26
Due date
2026-02-16
Ransomware
Known use
Required action
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
CISA description
SmarterTools SmarterMail contains an unrestricted upload of file with dangerous type vulnerability that could allow an unauthenticated attacker to upload arbitrary files to any location on the mail server, potentially enabling remote code execution.
Affected products (1)
VendorProductPlatformVersions
SmarterTools SmarterMail — SmarterMail versions Build 9406 and earlier
Weakness (CWE)
CWESourceDescription
CWE-434 adp CWE-434 Unrestricted Upload of File with Dangerous Type
CVSS scores (1)
ScoreSeverityVersionSourceVector
10.0 CRITICAL 3.1 cna CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
References (1)
Back to overview