https://patchfirst.co/vendor/smartertools/New and newly exploited SmarterTools CVEs, with CISA KEV, EPSS and ATT&CK context. Newest 50 by publication or KEV listing.en-gb360Sat, 31 Oct 2026 05:11:25 GMThttps://patchfirst.co/cve/CVE-2026-24423/CVE-2026-24423#kevThu, 05 Feb 2026 00:00:00 GMTSmarterTools · SmarterMail. In CISA KEV since 2026-02-05, known ransomware use. ENISA EUVD lists it as exploited. EPSS 88.2% (higher than 99.77% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 84.8 of 100.kevransomwarepublic-exploitT1190T1059https://patchfirst.co/cve/CVE-2025-52691/CVE-2025-52691#kevMon, 26 Jan 2026 00:00:00 GMTSmarterTools · SmarterMail. In CISA KEV since 2026-01-26, known ransomware use. ENISA EUVD lists it as exploited. EPSS 85.7% (higher than 99.72% of CVEs). CVSS 10.0 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter; T1505.003 Web Shell. Named in 1 threat report. Priority 88.8 of 100.kevransomwarepublic-exploitT1190T1059T1505.003https://patchfirst.co/cve/CVE-2026-23760/CVE-2026-23760#kevMon, 26 Jan 2026 00:00:00 GMTSmarterTools · SmarterMail. In CISA KEV since 2026-01-26, known ransomware use. ENISA EUVD lists it as exploited. EPSS 96.4% (higher than 99.88% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter; T1078 Valid Accounts. Priority 84.8 of 100.kevransomwarepublic-exploitT1190T1059T1078