PT-2026-8360 · Smartertools · Smartermail

Egidio Romano · CVE-2026-26930 · Published 2026-01-26 · Updated 2026-02-22

Positive Technologies (AI Summary)

CVSS v3.1

7.2

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions SmarterTools SmarterMail versions prior to 9526

Description SmarterTools SmarterMail is susceptible to a cross-site scripting (XSS) issue through MAPI requests. The issue allows for the injection of malicious scripts via crafted MAPI requests.

Recommendations Update SmarterTools SmarterMail to version 9526 or later.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

BDU:2026-02197

CVE-2026-26930

Affected Products

Smartermail

References · 11

• https://bdu.fstec.ru/vul/2026-02197 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-26930 · Security Note
• http://seclists.org/fulldisclosure/2026/Feb/30 · Note
• https://smartertools.com/smartermail/release-notes/current#/9526 · Note
• https://t.me/CVEtracker/44847 · Telegram Post
• https://t.me/cveNotify/152122 · Telegram Post
• https://twitter.com/cracbot/status/2025163662043086853 · Twitter Post
• https://smartertools.com/smartermail/release-notes/current · Note
• https://smartertools.com/smartermail/release-notes#9526 · Note
• https://twitter.com/CVEnew/status/2023456491085205958 · Twitter Post
• https://t.me/cveNotify/152791 · Telegram Post