https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T21:56:20.970069+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-337051 EUVD-2026-337051 2026-10-03T21:56:20.972612+00:00 EUVD-2026-337051 https://cve.radiocsirt.org/vuln/fkie_cve-2026-7807 fkie_cve-2026-7807 2026-10-03T21:56:20.972642+00:00

SmarterTools SmarterMail builds prior to 9560 contain a local file inclusion vulnerability in the /api/v1/report/summary/{type} API endpoint that allows authenticated users to read arbitrary .json files on the system. Attackers can exploit this vulnerability combined with weak encryption algorithms and hardcoded keys to decrypt and access stored passwords and 2FA secrets for all users.

 https://cve.radiocsirt.org/vuln/ghsa-qhw2-rfvc-fvrq GHSA-qhw2-rfvc-fvrq 2026-10-03T21:56:20.972673+00:00

SmarterTools SmarterMail builds prior to 9560 contain a local file inclusion vulnerability in the /api/v1/report/summary/{type} API endpoint that allows authenticated users to read arbitrary .json files on the system. Attackers can exploit this vulnerability combined with weak encryption algorithms and hardcoded keys to decrypt and access stored passwords and 2FA secrets for all users.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0619 WID-SEC-W-2026-0619 — SmarterTools SmarterMail: Mehrere Schwachstellen 2026-10-03T21:56:20.972690+00:00

Ein Angreifer kann mehrere Schwachstellen in SmarterTools SmarterMail ausnutzen, um erweiterte Privilegien zu erlangen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuführen oder andere, nicht näher spezifizierte Angriffe durchzuführen.