CVE-2026-24423Critical· 9.8▾ Hadal⚠ Exploited in the wild

SmarterTools SmarterMail versions prior to build 9511 contain an unauthenticated remote code execution vulnerability in the ConnectToHub API method

SmarterTools SmarterMail versions prior to build 9511 contain an unauthenticated remote code execution vulnerability in the ConnectToHub API method. The attacker could point the SmarterMail to the malicious HTTP server, which serves the …

▾ Hadal zone — Critical and actively exploited (CISA KEV / 0day)

Depth score100/ 100 · Severe

impact 53.9 · likelihood 17.5 · exploitation 25 · ransomware 5

🔒

Full detail requires an account

The latest CVEs are free to read. CVE-2026-24423 is outside the free window — sign in (free) to view the full technical detail, affected versions, references, and raw markdown.