PT-2026-8360 · Smartertools · Smartermail

Egidio Romano · Publicado 2026-01-26 · Atualizado 2026-02-22 · CVE-2026-26930

Positive Technologies (AI Summary)

CVSS v3.1

7.2

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions SmarterTools SmarterMail versions prior to 9526

Description SmarterTools SmarterMail is susceptible to a cross-site scripting (XSS) issue through MAPI requests. The issue allows for the injection of malicious scripts via crafted MAPI requests.

Recommendations Update SmarterTools SmarterMail to version 9526 or later.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

BDU:2026-02197

CVE-2026-26930

Produtos afetados

Smartermail

Referências · 11

• http://seclists.org/fulldisclosure/2026/Feb/30 · Nota
• https://smartertools.com/smartermail/release-notes/current#/9526 · Nota
• https://t.me/CVEtracker/44847 · Publicação no Telegram
• https://t.me/cveNotify/152122 · Publicação no Telegram
• https://twitter.com/cracbot/status/2025163662043086853 · Publicação no Twitter
• https://smartertools.com/smartermail/release-notes/current · Nota
• https://bdu.fstec.ru/vul/2026-02197 · Nota de Segurança
• https://smartertools.com/smartermail/release-notes#9526 · Nota
• https://twitter.com/CVEnew/status/2023456491085205958 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2026-26930 · Nota de Segurança
• https://t.me/cveNotify/152791 · Publicação no Telegram