SmarterMail Vulnerabilities Advisory

This advisory from CERT-Bund (WID-SEC-2026-0819) addresses multiple critical vulnerabilities in SmarterTools SmarterMail, affecting Linux, UNIX, and Windows operating systems. The vulnerabilities, with a CVSS Base Score of 8.6, can be exploited remotely by anonymous attackers to deceive users, bypass security mechanisms, cause denial of service, and expose credentials. The advisory indicates that mitigation measures are available.

Organizations using SmarterMail, specifically versions prior to Build 9575, should immediately review the advisory and implement available mitigation strategies. Failure to address these vulnerabilities could lead to significant security breaches, including unauthorized access and system disruption. The advisory provides links for CVE information and version history, which should be consulted for detailed remediation steps.