QSearchQSearch

CVE-2026-40514

5.9 MEDIUM

SmarterTools SmarterMail builds prior to 9610 contain a cryptographic weakness in the file and email sharing endpoints that use DES-CBC e...

Published: 2026-04-27 · Last updated: 2026-06-04

Severity and scoring

CVSS
5.9 MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
CWE
CWE-338

Affected products

VendorProduct
smartertoolssmartermail

Description

SmarterTools SmarterMail builds prior to 9610 contain a cryptographic weakness in the file and email sharing endpoints that use DES-CBC encryption with keys and initialization vectors derived from System.Random seeded with insufficient entropy, reducing the seed space to approximately 19,000 possible values. An unauthenticated attacker can use the attachment download endpoint as an oracle to determine the seed in use and derive encryption keys and initialization vectors to forge sharing tokens for arbitrary emails, attachments, or file storage contents without prior access to the targeted content.

Source: NVD

References

Related CVEs

Same vendor

  • CVE-2026-7807 — SmarterTools SmarterMail builds prior to 9560 contain a local file inclusion vulnerability in the /api/v1/report/summary/{type} API endpo... (8.1 HIGH)

Same CWE

  • CVE-2026-11832 — Dancer2::Plugin::Auth::OAuth versions before 0.22 for Perl default to a predictable nonce (9.1 CRITICAL)
  • CVE-2026-9638 — Crypt::PBKDF2 versions before 0.261630 for Perl generate insecure random values for salts (7.5 HIGH)
  • CVE-2026-46493 — HAX CMS helps manage microsite universe with PHP or NodeJs backends (7.5 HIGH)
  • CVE-2026-11347 — The linqi application contains hardcoded cryptographic keys
  • CVE-2026-41858 — Weak Randomness / Insecure Cryptographic Primitive (CWE-338) in Get-RandomPassword in BOSH-Ecosystem / windows-utilities-release allows a... (7.5 HIGH)