CVE-2025-52691

🔥 Known Exploited (CISA KEV)CRITICAL

10.0

CVSS Severity Score

EPSS Score0.0000%

EPSS Percentile0.00th

Published2025-12-29

Last Modified2026-06-17

Data SourcesNVDCISA KEV

Vulnerability Description

Successful exploitation of the vulnerability could allow an unauthenticated attacker to upload arbitrary files to any location on the mail server, potentially enabling remote code execution.

Affected Platforms (CPE)

📦

Smartertools

Smartermail

< 100.0.9413

References & Advisories

🔗 https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2025-124/

🔗 https://github.com/watchtowrlabs/watchTowr-vs-SmarterMail-CVE-2025-52691?ref=labs.watchtowr.com

🔗 https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-52691

Vulnerability Description

Affected Platforms (CPE)

Smartermail

References & Advisories

相关漏洞威胁