- SmarterMail patched CVE-2025-52691, a maximum-severity RCE flaw allowing unauthenticated arbitrary file uploads
- Exploitation could let attackers deploy web shells or malware, steal data, and pivot deeper into networks
- No confirmed in-the-wild abuse yet, but unpatched servers remain prime targets once exploit details circulate
Business-grade email server software SmarterMail just patched a maximum-severity vulnerability that allowed threat actors to engage in remote code execution (RCE) attacks.
