sign in--:--:--UTC

CVE-2026-23760

exploited in the wild

CVSS

9.9

Reports

3

First seen

Jan 22

Last seen

Mar 12

Affected product

SmarterMail versions prior to Build 9511

Associated actors

APT28 ×2 Lotus Blossom ×1 UAT-8616 ×1 UNC6201 ×1

Recent reports

February 2026 CVE Landscape: 13 Critical Vulnerabilities, 43% Drop from January

Recorded Future InsiktMar 12 Critical

January 2026 CVE Landscape: 23 Critical Vulnerabilities, APT28 Exploits Microsoft Office Zero-Day

Recorded Future InsiktFeb 24 Critical

Huntress Detects In-the-Wild SmarterMail Account Takeover RCE (CVE-2026-23760)

Huntress BlogJan 22

This page shows data on a 7-day delay. Free accounts get the full delayed feed; real-time reports, indicators, and the API start at $29/mo.

Sign up See plans