ZDI-CAN-33567: ZDI-26-996: SmarterTools SmarterMail Missing Authorization Information Disclosure Vulnerability
Published Nov 13, 2026
·Updated
This vulnerability allows remote attackers to disclose sensitive information on affected installations of SmarterTools SmarterMail. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 6.5. The following CVEs are assigned: CVE-2026-126968.
Affected Software
1 affected component
SmarterTools SmarterMail
Event History
Nov 13, 2026
Advisory Published
via ZDI·06:00 AM
Data Sourced
via ZDI·06:00 AM
Description
Frequently Asked Questions
1
Who is realistically exposed to this issue?
Affected SmarterTools SmarterMail installations are exposed to authenticated remote attackers. An attacker must be able to authenticate to the installation before exploiting the vulnerability.
2
What impact could successful exploitation have?
Successful exploitation can disclose sensitive information from an affected SmarterTools SmarterMail installation. The assigned CVSS rating is 6.5.