CVE-2025-52691— Upload Arbitrary Files
Quick assessment
Affected
SmarterTools SmarterMail
Exploitation
Confirmed exploitation in the wild; remediate immediately
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
SmarterTools SmarterMail是SmarterTools公司的一套邮件服务器软件。该软件支持垃圾邮件过滤、数据统计、简单邮件传输协议SMTP验证等功能。 SmarterTools SmarterMail存在安全漏洞，该漏洞源于未经验证的攻击者可上传任意文件，可能导致远程代码执行。
Public Exploits 2
Metasploit · 1
smartermail_guid_file_upload.rb [exploit]
Nuclei · 1
CVE-2025-52691.yaml [template]
In-the-Wild Activity Observed
cisa_kev · confirmed
Possible ATT&CK Techniques 2 AI
T1203 · Exploitation for Client Execution T1195.002 · Compromise Software Supply Chain
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2025-52691
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Upload Arbitrary Files
Source: CVE Program / CVE List V5
Vulnerability Description
Successful exploitation of the vulnerability could allow an unauthenticated attacker to upload arbitrary files to any location on the mail server, potentially enabling remote code execution.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
SmarterTools SmarterMail 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
SmarterTools SmarterMail是SmarterTools公司的一套邮件服务器软件。该软件支持垃圾邮件过滤、数据统计、简单邮件传输协议SMTP验证等功能。 SmarterTools SmarterMail存在安全漏洞，该漏洞源于未经验证的攻击者可上传任意文件，可能导致远程代码执行。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Shenlong Deep Dive — AI Deep Analysis
10-question deep dive: root cause, exploitation, mitigation, urgency. Read summary free, full version requires login.
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| SmarterTools | SmarterMail | SmarterMail versions Build 9406 and earlier | - |
|
II. Public POCs for CVE-2025-52691
| # | POC Description | Source Link | Shenlong Link |
|---|---|---|---|
| 1 | Mail server contains an unrestricted file upload vulnerability allowing unauthenticated attackers to upload arbitrary files to any location, potentially enabling remote code execution. | https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-52691.yaml | POC Details |
| 2 | None | https://github.com/yt2w/CVE-2025-52691 | POC Details |
| 3 | Detection for CVE-2025-52691 | https://github.com/rxerium/CVE-2025-52691 | POC Details |
| 4 | CVE-2025-52691 | https://github.com/Ashwesker/Ashwesker-CVE-2025-52691 | POC Details |
| 5 | This repository contains a safe Proof of Concept (PoC) to detect vulnerable SmarterMail versions affected by CVE‑2025‑52691. The script performs version detection only and does not exploit the vulnerability. | https://github.com/you-ssef9/CVE-2025-52691 | POC Details |
| 6 | An enhanced proof-of-concept exploit for CVE-2025-52691 (SmarterMail Arbitrary File Upload RCE) with APT-level features like stealth obfuscation, persistence, exfiltration, and interactive mode. For educational and authorized testing only. Credits to the original PoC by yt2w/CVE-2025-52691. | https://github.com/DeathShotXD/CVE-2025-52691-APT-PoC | POC Details |
| 7 | None | https://github.com/sajjadsiam/CVE-2025-52691-poc | POC Details |
| 8 | CVE‑2025‑52691 - SmarterMail Arbitrary File Upload Vulnerability | https://github.com/hilwa24/CVE-2025-52691 | POC Details |
| 9 | CVE-2025-52691 Scanner - Detects vulnerable SmarterMail installations (CVSS 10.0 RCE) | https://github.com/nxgn-kd01/smartermail-cve-scanner | POC Details |
| 10 | None | https://github.com/watchtowrlabs/watchTowr-vs-SmarterMail-CVE-2025-52691 | POC Details |
| 11 | None | https://github.com/rimbadirgantara/CVE-2025-52691-poc | POC Details |
| 12 | CVE-2025-52691 | https://github.com/mohammadzarnian1357/Ashwesker-CVE-2025-52691 | POC Details |
| 13 | CVE-2025-52691 PoC: Based on watchtowr's article WT-2026-0001 about an authentication bypass exploit, this one is a functional Python attack script. | https://github.com/ninjazan420/CVE-2025-52691-PoC-SmarterMail-authentication-bypass-exploit-WT-2026-0001 | POC Details |
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2025-52691
请登录查看更多情报信息。
IV. Related Vulnerabilities
Same product: SmarterMail
-
CVE-2026-7807
SmarterTools SmarterMail < Build 9560 Server Local File Incl -
CVE-2026-40514
SmarterTools SmarterMail < Build 9610 Cryptographic Weakness -
CVE-2026-26930
SmarterTools SmarterMail 安全漏洞 -
CVE-2026-25067
SmarterTools SmarterMail < Build 9518 Unauthenticated backgr -
CVE-2026-24423
SmarterTools SmarterMail < Build 9511 Unauthenticated RCE vi
Same vendor: SmarterTools
-
CVE-2026-26930
SmarterTools SmarterMail 安全漏洞 -
CVE-2026-25067
SmarterTools SmarterMail < Build 9518 Unauthenticated backgr -
CVE-2026-24423
SmarterTools SmarterMail < Build 9511 Unauthenticated RCE vi -
CVE-2026-23760
SmarterTools SmarterMail < Build 9511 Authentication Bypass -
CVE-2020-36926
SmarterTools SmarterTrack 7922 -Information Disclosure
V. Comments for CVE-2025-52691
No comments yet