Intrusion PreventionSmarterTools.SmarterMail.connect-to-hub.Command.Injection
Description
This indicates an attack attempt to exploit a Command Injection Vulnerability in SmarterTools SmarterMail.
The vulnerability is due to missing authentication in a critical endpoint. A remote attacker could exploit this vulnerability by sending a maliciously crafted response to the target server. Successful exploitation enables the attacker to execute arbitrary commands within the application's security context.
Affected Products
SmarterTools SmarterMail prior to Build 9511
Impact
System Compromise: Remote attackers can gain control of vulnerable systems.
Recommended Actions
Apply the most recent upgrade or patch from the vendor.
https://www.smartertools.com/smartermail/release-notes/current
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
Version Updates
| ID | 60286 |
| Created | Feb 10, 2026 |
| Updated | Feb 18, 2026 |
| CVE ID | |
| Risk |
|
| Known Exploited | Yes |
| Exploit Prediction Score | 66.4% |
| Default Action | drop |
| Active | |
| Affected OS | Windows, Linux, MacOS |
| Affected App | Other |
| Profile Type | OS Command Injection |