Users could be tricked into running arbitrary code, but the issue was patched last week.

SmarterMail patched CVE-2025-52691, a maximum-severity RCE flaw allowing unauthenticated arbitrary file uploads Exploitation could let attackers deploy web shells or malware, steal data, and pivot ...

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works. Open WebUI carried CVE-2025-64496, a high-severity code injection flaw in Direct Connection ...