VULNERABILITY INTELLIGENCE
CVE-2026-23760
Known Exploited Vulnerability
SmarterTools SmarterMail Authentication Bypass Using an Alternate Path or Channel Vulnerability
Vendor / product: SmarterTools / SmarterMail
Description
SmarterTools SmarterMail versions prior to build 9511 contain an authentication bypass vulnerability in the password reset API. The force-reset-password endpoint permits anonymous requests and fails to verify the existing password or a reset token when resetting system administrator accounts. An unauthenticated attacker can supply a target administrator username and a new password to reset the account, resulting in full administrative compromise of the SmarterMail instance. NOTE: SmarterMail system administrator privileges grant the ability to execute operating system commands via built-in management functionality, effectively providing administrative (SYSTEM or root) access on the underlying host.
Weakness classification
- disclosure@vulncheck.com: CWE-288
Primary references
- disclosure@vulncheck.com — Third Party Advisory
- disclosure@vulncheck.com — Exploit, Third Party Advisory
- disclosure@vulncheck.com — Release Notes
- disclosure@vulncheck.com — Third Party Advisory
- 134c704f-9b21-4f2e-91b3-4a467353bcc0 — US Government Resource
- 134c704f-9b21-4f2e-91b3-4a467353bcc0 — Exploit, Third Party Advisory