CVE-2025-52691

CriticalCVSS 10.0/10Known exploited (CISA KEV)Last modified Oct 7, 2026

Description

Successful exploitation of the vulnerability could allow an unauthenticated attacker to upload arbitrary files to any location on the mail server, potentially enabling remote code execution.

Metrics

CVSS 3.1 10.0/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Weakness enumeration

CWE-434

Affected software

Vendor	Product	Versions
SmarterTools	SmarterMail	SmarterMail versions Build 9406 and earlier

References

https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2025-124/Third Party Advisory
https://github.com/watchtowrlabs/watchTowr-vs-SmarterMail-CVE-2025-52691?ref=labs.watchtowr.comExploit, Third Party Advisory
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-52691US Government Resource

Timeline

Published: Dec 29, 2025
Last modified: Oct 7, 2026
Added to CISA KEV: Jan 26, 2026
NVD status: Analyzed

Related CVEs from 2025

CVE-2025-526928.8Successful exploitation of the vulnerability could allow an attacker with local network access to send a specially crafted URL to access cer CVE-2025-526949.8Successful exploitation of the SQL injection vulnerability could allow an unauthenticated remote attacker to execute arbitrary SQL commands CVE-2025-52707.5In certain cases, SNI could have been sent unencrypted even when encrypted DNS was enabled. This vulnerability was fixed in Firefox 139 and CVE-2025-527076.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Firelight Firelight Lightbox easy-fanc CVE-2025-527087.5Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in RealMag777 HUSKY wo CVE-2025-52716.5Previewing a response in Devtools ignored CSP headers, which could have allowed content injection attacks. This vulnerability was fixed in F CVE-2025-527105.9Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ninja Team File Manager Pro filester a CVE-2025-527114.3Cross-Site Request Forgery (CSRF) vulnerability in BoldGrid Post and Page Builder by BoldGrid post-and-page-builder allows Cross Site Reques CVE-2025-527124.2Path Traversal: '.../...//' vulnerability in BoldGrid Post and Page Builder by BoldGrid post-and-page-builder allows Path Traversal.This iss CVE-2025-527136.4Server-Side Request Forgery (SSRF) vulnerability in BoldGrid Post and Page Builder by BoldGrid post-and-page-builder allows Server Side Requ CVE-2025-527149.3Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in shinetheme Traveler traveler allows SQ CVE-2025-527157.5Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in RadiusTheme Classif