SmarterTools.SmarterMail.CVE-2025-52691.Arbitrary.File.Upload

Description

This indicates an attack attempt to exploit an Arbitrary File Upload Vulnerability in the SmarterTools SmarterMail server.
The vulnerability is due to insufficient access controls for file upload on the vulnerable application. A remote attacker can exploit this to upload maliciously crafted files to the target server. Successful exploitation can lead to arbitrary code execution.

Outbreak Alert

An actively targeted vulnerability has been identified in SmarterTools SmarterMail, tracked as CVE-2025-52691, with a CVSS score of 10.0 (Critical). The flaw allows unauthenticated attackers to upload arbitrary files to any location on the mail server, potentially resulting in remote code execution (RCE).

View the full Outbreak Alert Report

Affected Products

SmarterTools SmarterMail server build 9406 and prior

Impact

System Compromise: Remote attackers can gain control of vulnerable systems.

Recommended Actions

Apply the most recent upgrade or patch from the vendor.
https://www.smartertools.com/smartermail/release-notes/current