CVE-2026-24423

⚠ KEVEPSS 81.9%

SmarterTools SmarterMail Missing Authentication for Critical Function Vulnerability

加入 CISA KEV 日:2026/2/5

描述

SmarterTools SmarterMail contains a missing authentication for critical function vulnerability in the ConnectToHub API method. This could allow the attacker to point the SmarterMail instance to a malicious HTTP server which serves the malicious OS command and could lead to command execution.

受影響套件(0)

OSV 沒有提供套件對應。