agentprime: smartertools-smartermailEvery new CVE for smartertools-smartermail.https://agentprime.io/CVE-2026-104084: SmarterMail < Build 9777 Stale JWT Role Claim Privilege Escalation via Refresh Tokenhttps://agentprime.io/advisories/CVE-2026-104084/https://agentprime.io/advisories/CVE-2026-104084/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 09 Oct 2026 15:08:23 GMTCVECVE-2026-104083: SmarterMail < Build 9777 Stored Mutation XSS via MathML Foreign Contenthttps://agentprime.io/advisories/CVE-2026-104083/https://agentprime.io/advisories/CVE-2026-104083/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 09 Oct 2026 15:06:57 GMTCVECVE-2026-104082: SmarterMail < Build 9777 SysAdmin Remote Code Execution via Volume Mounthttps://agentprime.io/advisories/CVE-2026-104082/https://agentprime.io/advisories/CVE-2026-104082/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 09 Oct 2026 15:05:21 GMTCVECVE-2026-26930: Cross-site scripting in SmarterTools SmarterMailhttps://agentprime.io/advisories/CVE-2026-26930/https://agentprime.io/advisories/CVE-2026-26930/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 16 Feb 2026 16:27:14 GMTCVECVE-2026-25067: SmarterTools SmarterMail < Build 9518 Unauthenticated background-of-the-day Path Coercionhttps://agentprime.io/advisories/CVE-2026-25067/https://agentprime.io/advisories/CVE-2026-25067/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 29 Jan 2026 03:38:02 GMTCVECVE-2026-24423: SmarterTools SmarterMail < Build 9511 Unauthenticated RCE via ConnectToHub APIhttps://agentprime.io/advisories/CVE-2026-24423/https://agentprime.io/advisories/CVE-2026-24423/CVSS 9.3 (Critical). Critical: In CISA’s KEV catalogue since 5 Feb 2026: it is known to be exploited. CVSS score 9.3: 9.0 or more. CVSS score 9.3 (7.0 or more) and EPSS 0.88 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Fri, 23 Jan 2026 16:53:34 GMTCVEcriticalKEVCVE-2026-23760: SmarterTools SmarterMail < Build 9511 Authentication Bypass via Password Reset APIhttps://agentprime.io/advisories/CVE-2026-23760/https://agentprime.io/advisories/CVE-2026-23760/CVSS 9.3 (Critical). Critical: In CISA’s KEV catalogue since 26 Jan 2026: it is known to be exploited. CVSS score 9.3: 9.0 or more. CVSS score 9.3 (7.0 or more) and EPSS 0.96 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Thu, 22 Jan 2026 14:35:17 GMTCVEcriticalKEVCVE-2025-52691: Upload Arbitrary Fileshttps://agentprime.io/advisories/CVE-2025-52691/https://agentprime.io/advisories/CVE-2025-52691/CVSS 10.0 (Critical). Critical: In CISA’s KEV catalogue since 26 Jan 2026: it is known to be exploited. CVSS score 10.0: 9.0 or more. CVSS score 10.0 (7.0 or more) and EPSS 0.86 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Mon, 29 Dec 2025 02:15:58 GMTCVEcriticalKEV