SmarterTools SmarterMail < Build 9560 Server Local File Inclusion via the /api/v1/report/summary/{type} API
Priority LOW 39CWE-22Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- Low
- User interaction
- None
- Attack complexity
- Low
- Attack requirements
- None
- Impact type
- —
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- Fixed
Attack profile from CVSS 4.0 · CNA. Fix status from CNA.
Summary
SmarterTools SmarterMail builds prior to 9560 contain a local file inclusion vulnerability in the /api/v1/report/summary/{type} API endpoint that allows authenticated users to read arbitrary .json files on the system. Attackers can exploit this vulnerability combined with weak encryption algorithms and hardcoded keys to decrypt and access stored passwords and 2FA secrets for all users.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00296 22nd percentileScored 2026-11-07
Fix Fixed SmarterMail (SmarterTools Inc.): 9560
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| SmarterTools | SmarterMail | before 9560 | 9560 | Patch available | CNA |
- SmarterMail VendorSmarterTools Affected before 9560 Fixed in 9560 Patch available CNA
CPE configurations NVD · 1
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:smartertools:smartermail:*:*:*:*:*:*:*:* | before 100.0.9560 | Vulnerable | SmarterTools |
- cpe:2.3:a:smartertools:smartermail:*:*:*:*:*:*:*:* Versions before 100.0.9560 Vulnerable ·SmarterTools
Remediation
- Fix · CNA SmarterMail (SmarterTools Inc.) Fixed in 9560
Timeline
- 2026-10-02 Threatist record created from CVE-2026-7807
- 2026-10-03 Alias added: GHSA-qhw2-rfvc-fvrq
- 2026-10-25 Priority changed: MEDIUM → LOW
References
More SmarterTools Smartermail vulnerabilities
- TI-2025-32755 Upload arbitrary files in SmarterTools SmarterMail KEVCVSS 3.1CRITICAL 10.0
- TI-2026-19690 SmarterTools SmarterMail < Build 9511 Unauthenticated RCE via ConnectToHub API KEVCVSS 4.0CRITICAL 9.3
- TI-2026-19133 SmarterTools SmarterMail < Build 9511 Authentication Bypass via Password Reset API KEVCVSS 4.0CRITICAL 9.3
- TI-2019-05110 SmarterTools SmarterMail 16.x before build 6985 allows deserialization of untrusted data. CVSS 3.0CRITICAL 9.8
- TI-2019-05109 SmarterTools SmarterMail 16.x before build 6985 allows directory traversal. CVSS 3.0MEDIUM 6.5
- TI-2021-12079 SmarterTools SmarterMail 16.x through 100.x before 100.0.7803 allows remote code execution. CVSS 3.1CRITICAL 9.8
Sources
- CVE-2026-7807 · CVE Program
- CVE-2026-7807 · NVD
- FIRST EPSS
- GHSA-qhw2-rfvc-fvrq · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences