CVE-2025-52691CISA KEV: Actively Exploited

SmarterTools SmarterMail Unrestricted Upload of File with Dangerous Type Vulnerability

Published Jan 26, 2026·Updated Jan 26, 2026

Description

SmarterTools SmarterMail contains an unrestricted upload of file with dangerous type vulnerability that could allow an unauthenticated attacker to upload arbitrary files to any location on the mail server, potentially enabling remote code execution.

Public Exploits & PoCs8 found

PoC: smartermail-cve-scanner

CVE-2025-52691 Scanner - Detects vulnerable SmarterMail installations (CVSS 10.0 RCE)

1

PoC: CVE-2025-52691-PoC-SmarterMail-authentication-bypass-exploit-WT-2026-0001

CVE-2025-52691 PoC: Based on watchtowr's article WT-2026-0001 about an authentication bypass exploit, this one is a functional Python attack script.

PoC: Ashwesker-CVE-2025-52691

CVE-2025-52691

PoC: CVE-2025-52691

CVE‑2025‑52691 - SmarterMail Arbitrary File Upload Vulnerability

PoC: CVE-2025-52691-APT-PoC

An enhanced proof-of-concept exploit for CVE-2025-52691 (SmarterMail Arbitrary File Upload RCE) with APT-level features like stealth obfuscation, persistence, exfiltration, and interactive mode. For educational and authorized testing only. Credits to the original PoC by yt2w/CVE-2025-52691.

PoC: CVE-2025-52691

This repository contains a safe Proof of Concept (PoC) to detect vulnerable SmarterMail versions affected by CVE‑2025‑52691. The script performs version detection only and does not exploit the vulnerability.

PoC: Ashwesker-CVE-2025-52691

CVE-2025-52691

PoC: CVE-2025-52691

Detection for CVE-2025-52691

References

View on NVD Search GitHub Search Google

Get alerted for CVEs like this

Register your stack and get notified within minutes when a matching CVE drops.

Start monitoring free