Unrestricted file upload in Smartertools Smartermail
CVSS score
10.0
EPSS probability
%85.7
Risk score
17.1
Published
9 mo ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
CVE-2025-52691 PoC: Based on watchtowr's article WT-2026-0001 about an authentication bypass exploit, this one is a functional Python attack script.
watchtowrlabs/watchTowr-vs-SmarterMail-CVE-2025-52691
CVE-2025-52691 Scanner - Detects vulnerable SmarterMail installations (CVSS 10.0 RCE)
An enhanced proof-of-concept exploit for CVE-2025-52691 (SmarterMail Arbitrary File Upload RCE) with APT-level features like stealth obfuscation, persistence, exfiltration, and interactive mode. For educational and authorized testing only. Credits to the original PoC by yt2w/CVE-2025-52691.
This repository contains a safe Proof of Concept (PoC) to detect vulnerable SmarterMail versions affected by CVE‑2025‑52691. The script performs version detection only and does not exploit the vulnerability.
Nuclei: SmarterMail - Unrestricted File Upload
https://github.com/watchtowrlabs/watchTowr-vs-SmarterMail-CVE-2025-52691?ref=labs.watchtowr.com
Similar Vulnerabilities
SmarterTools SmarterMail < Build 9511 Authentication Bypass via Password Reset API
SmarterTools SmarterMail < Build 9511 Unauthenticated RCE via ConnectToHub API
SmarterMail < Build 9777 SysAdmin Remote Code Execution via Volume Mount
SmarterMail < Build 9777 Stale JWT Role Claim Privilege Escalation via Refresh Token
SmarterMail < Build 9777 Stored Mutation XSS via MathML Foreign Content
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2025-52691"