CVE-2025-52691
Upload Arbitrary Files
KEV RANSOMWARECRITICAL 10.0EPSS 85.7%
Successful exploitation of the vulnerability could allow an unauthenticated attacker to upload arbitrary files to any location on the mail server, potentially enabling remote code execution.
- Affected
- SmarterTools · SmarterMail
- CVSS v3.1 CNA
- 10.0 CRITICAL
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H - EPSS
- 85.66% chance of exploitation in the next 30 days, 100th percentile
- CISA KEV
- added 2026-01-26, used in ransomware campaigns
- Nuclei
- critical
- Published
- 2025-12-29
- Updated
- 2026-02-26
Proof-of-concept exploits (7)
- DeathShotXD/CVE-2025-52691-APT-PoC5★ · 2025-12-30
- Udyz/CVE-2025-526910★ · 2025-12-29
- mohammadzarnian1357/Ashwesker-CVE-2025-526910★ · 2025-12-30
- ninjazan420/CVE-2025-52691-PoC-SmarterMail-authentication-bypass-exploit-WT-2026-00010★ · 2026-01-24
- rimbadirgantara/CVE-2025-52691-poc3★ · 2025-12-30
- watchtowrlabs/watchTowr-vs-SmarterMail-CVE-2025-5269119★ · 2026-01-08
- you-ssef9/CVE-2025-526911★ · 2025-12-30
Nuclei templates (1)
Metasploit modules (1)
Exploit collections (1)
- CVE-2025-52691.yamlzan8in/afrog
Security advisories
- watchtowrlabs/watchTowr-vs-SmarterMail-CVE-2025-52691?ref=labs.watchtowr.com
- https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2025-124