PT-2026-35434 · Smartertools · Smartermail

Maximilian Wiegand · Published 2026-04-27 · Updated 2026-04-27 · CVE-2026-40514

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Medium

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions SmarterTools SmarterMail versions prior to 9610

Description A cryptographic weakness exists in the file and email sharing endpoints. These endpoints utilize DES-CBC encryption with keys and initialization vectors derived from System.Random seeded with insufficient entropy, which limits the seed space to roughly 19,000 possible values. An unauthenticated attacker can utilize the attachment download endpoint as an oracle to identify the active seed and derive the necessary encryption keys and initialization vectors. This allows the attacker to forge sharing tokens for arbitrary emails, attachments, or file storage contents without having prior access to the targeted data.

Recommendations Update to build 9610 or later.

Fix

Weakness Enumeration

CWE-338

Related Identifiers

CVE-2026-40514

Affected Products

Smartermail

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2026-40514 · Security Note
• https://smartertools.com/smartermail/release-notes/current · Patch
• https://twitter.com/VulmonFeeds/status/2048847795700859105 · Twitter Post
• https://vulncheck.com/advisories/smartertools-smartermail-build-9610-cryptographic-weakness-via-weak-rng · Note
• https://t.me/CVEtracker/51946 · Telegram Post
• https://twitter.com/CVEnew/status/2048852158502613171 · Twitter Post