Smartertools Inc Smartermail vulnerabilities
2 known vulnerabilities affecting smartertools_inc/smartermail.
Total CVEs
2
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL1HIGH1
Vulnerabilities
Page 1 of 1
CVE-2026-40514P3CRITICALCVSS 9.1fixed in 100.0.96102026-04-27
CVE-2026-40514 [CRITICAL] CWE-338 CVE-2026-40514: SmarterTools SmarterMail builds prior to 9610 contain a cryptographic weakness in the file and email
SmarterTools SmarterMail builds prior to 9610 contain a cryptographic weakness in the file and email sharing endpoints that use DES-CBC encryption with keys and initialization vectors derived from System.Random seeded with insufficient entropy, reducing the seed space to approximately 19,000 possible values. An unauthenticated attacker can use the
nvd
CVE-2026-7807P3HIGHCVSS 8.8fixed in 95602026-05-08
CVE-2026-7807 [HIGH] CWE-22 CVE-2026-7807: SmarterTools SmarterMail builds prior to 9560 contain a local file inclusion vulnerability in the /a
SmarterTools SmarterMail builds prior to 9560 contain a local file inclusion vulnerability in the /api/v1/report/summary/{type} API endpoint that allows authenticated users to read arbitrary .json files on the system. Attackers can exploit this vulnerability combined with weak encryption algorithms and hardcoded keys to decrypt and access stored password
nvd