Metadaten
full_disc543c0e5ecde3c23307610a69bfb10af1268b4b2bed6e106ff5d4c148586b14d9Posted by evan via Fulldisclosure on Oct 15 original blog: https://blog.evan.lat/posts/sm/
SUMMARY: multiple vulns and misconfigurations in smartermail, notably
a mxss and session persistence issues, alongside several logic bugs
can be chained to achieve remote code execution as nt
authority\system;
https://nvd.nist.gov/vuln/detail/CVE-2026-104082
https://nvd.nist.gov/vuln/detail/CVE-2026-104083
https://nvd.nist.gov/vuln/detail/CVE-2026-104084
a mutated xss exists in smartermail. by...
| CVE-ID | Severity (Quelle) | CVSS (Quelle) | Severity (CVE.org) | CVSS (CVE.org) | EPSS | EPSS-Pctl | Veroeffentlicht (CVE.org) |
|---|---|---|---|---|---|---|---|
HIGH |
8.8 |
HIGH |
8.6 |
2026-10-09 |
|||
HIGH |
8.8 |
MEDIUM |
6.1 |
2026-10-09 |
|||
HIGH |
8.8 |
HIGH |
8.8 |
2026-10-09 |
| Bezeichnung | Name | Kategorie | Tags | Zielgruppe | Sprache | Feed-URL |
|---|---|---|---|---|---|---|
| Full Disclosure | threat_intel | - | de | https://seclists.org/rss/fulldisclosure.rss |