CVE-2026-24423

SmarterTools SmarterMail < Build 9511 Unauthenticated RCE via ConnectToHub API

SmarterTools SmarterMail versions prior to build 9511 contain an unauthenticated remote code execution vulnerability in the ConnectToHub API method. The attacker could point the SmarterMail to the malicious HTTP server, which serves the malicious OS command. This command will be executed by the vulnerable application.

Affected

SmarterTools · SmarterMail

CVSS v4.0 VULNCHECK

9.3 CRITICALCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

CVSS v3.1 NVD

9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

88.18% chance of exploitation in the next 30 days, 100th percentile

CISA KEV

added 2026-02-05, used in ransomware campaigns

Nuclei

critical · CWE-306

Published

2026-01-23

Updated

2026-08-04

Proof-of-concept exploits (2)

• aavamin/CVE-2026-244238★ · 2026-01-29
• CyberAlp0/SmarterMail-CVE-2026-244230★ · 2026-09-28

Nuclei templates (1)

• projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-24423.yaml

Security advisories

• https://code-white.com/public-vulnerability-list/#systemadminsettingscontrollerconnecttoh…
• https://www.vulncheck.com/advisories/smartertools-smartermail-unauthenticated-rce-via-con…
• https://www.smartertools.com/smartermail/release-notes/current

References

• CVE Record
• NVD entry

Related

• CVE-2024-4577