PublicCVE

CVE-2026-26930

HIGH7.2Cross-site scripting

Description

SmarterTools SmarterMail before 9526 allows XSS via MAPI requests.

CVSS breakdown

CVSS 3.1
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Changed
Confidentiality
Low
Integrity
Low
Availability
None

Affected products

Updated 31m ago · 2 sources