CVE-2026-24423

SmarterTools SmarterMail versions prior to build 9511 contain an unauthenticated remote code execution vulnerability in the ConnectToHub API method. The attacker could point the SmarterMail to the malicious HTTP server, which serves the malicious OS command. This command will be executed by the vulnerable application.

CVSS v4.0

9.3 CRITICALCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

CVSS v3.1

9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

87.69% chance of exploitation in the next 30 days, 100th percentile

CISA KEV

added 2026-02-05, used in ransomware campaigns

Nuclei

critical · CWE-306

Published

2026-01-23

Updated

2026-08-04

Proof-of-concept exploits (1)

• aavamin/CVE-2026-244238★ · 2026-01-29

Nuclei templates (1)

• projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-24423.yaml

References

• CVE Record
• NVD entry

Related

• CVE-2024-4577
• CVE-2026-24422
• CVE-2026-24444
• CVE-2026-24421
• CVE-2026-24451
• CVE-2026-24420