VULNERABILITY INTELLIGENCE

CVE-2025-52691

CVSS score10 CRITICAL

EPSS probability85.66%

CISA KEVKnown exploited vulnerability

Published2025-12-29

Last modified2026-10-07

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Known Exploited Vulnerability

SmarterTools SmarterMail Unrestricted Upload of File with Dangerous Type Vulnerability

Vendor / product: SmarterTools / SmarterMail

Description

Successful exploitation of the vulnerability could allow an unauthenticated attacker to upload arbitrary files to any location on the mail server, potentially enabling remote code execution.

Weakness classification

134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-434

Primary references

5f57b9bf-260d-4433-bf07-b6a79e9bb7d4 — Third Party Advisory
134c704f-9b21-4f2e-91b3-4a467353bcc0 — Exploit, Third Party Advisory
134c704f-9b21-4f2e-91b3-4a467353bcc0 — US Government Resource