CVE-2025-52691
Act now ● On CISA KEV — actively exploited used in ransomware
Actively exploited — on the CISA KEV list.
CVSS base
—
EPSS — probability of exploitation (30 days)
85.7%
99.7th percentile
CISA KEV
Listed
Added 2026-01-26 · patch by 2026-02-16
Weakness / dates
—
Published — · modified —
Timeline
- 2026-01-26 — Added to CISA KEV (actively exploited)
- 2026-02-16 — CISA patch-by deadline
Description
SmarterTools SmarterMail contains an unrestricted upload of file with dangerous type vulnerability that could allow an unauthenticated attacker to upload arbitrary files to any location on the mail server, potentially enabling remote code execution.