Find notable cyber news and cases, enriched with sources, timelines, and signals.
Home Watchlists Beta Browse News Feed Stats About Contact

SmarterMail security update for CVE-2025-52691

Security Patch Release
First reported
Last updated
Happening score
H score 47
1 unique sources, 1 articles

Summary

Hide ▲

SmarterTools SmarterMail received a fix for CVE-2025-52691, a CVSS 10.0 arbitrary-file-upload flaw that could enable unauthenticated remote code execution across Build 9406 and earlier. Build 9413 addressed the issue, and Build 9483 was later recommended for optimal protection. Operators should upgrade promptly because the vulnerability can let an attacker upload arbitrary files to the mail server and potentially execute code.

Related Happenings

TrendAI Trend Micro’s enterprise business security patch release for CVE-2026-34926

Security Patch Release
H score45 First: 22.05.2026 11:19 Last: 22.05.2026 11:19 Sources 1

About this happening: TrendAI released Apex One security updates after confirming a zero-day had been exploited in the wild, leaving on-premises installations at risk until patched....

Open Happening

Ivanti security patch release for CVE-2026-8043

Security Patch Release
H score25 First: 18.05.2026 13:54 Last: 18.05.2026 13:54 Sources 1

About this happening: Ivanti, Fortinet, SAP, Broadcom, and n8n released security fixes on 2026-05-18 for flaws that could enable authentication bypass, remote code execution, SQL...

Open Happening

Progress security patch release for CVE-2026-2699

Security Patch Release
H score68 First: 02.04.2026 16:33 Last: 02.04.2026 16:33 Sources 1

About this happening: Progress released ShareFile 5.12.4 on March 10 to fix CVE-2026-2699 and CVE-2026-2701 in the Storage Zones Controller (SZC) for branch 5.x. The update...

Open Happening

CISA SmarterMail remediation guidance for CVE-2026-24423

Advisory/Mitigation
H score86 First: 06.02.2026 19:16 Last: 06.02.2026 19:16 Sources 1

About this happening: SmarterMail is at the center of a CVE-2026-24423 remediation and exploitation wave: the flaw enables unauthenticated remote code execution in versions prior to Build...

Open Happening

N8n 2.4.0 security update for sandbox-escape flaw (CVE-2026-25049)

Security Patch Release
H score39 First: 04.02.2026 23:14 Last: 04.02.2026 23:14 Sources 1

About this happening: n8n released version 2.4.0 on January 12, 2026, fixing a sandbox-escape bypass that could let authenticated workflow editors achieve remote code execution on a...

Open Happening

Timeline

  3. 30.12.2025 18:28 1 articles · 6mo ago

    CSA issues bulletin on SmarterMail CVE-2025-52691

    Initial Disclosure

    Cyber Security Agency of Singapore (CSA) issues a bulletin on SmarterTools SmarterMail CVE-2025-52691, a CVSS 10.0 arbitrary file upload flaw that could let an unauthenticated attacker upload arbitrary files to the mail server and potentially trigger remote code execution.

    Show sources
    Open in new tab