Over 6,000 SmarterMail servers exposed to automated hijacking attacks

**Executive summary:** A critical authentication-bypass flaw (CVE-2026-23760) in SmarterTools SmarterMail allows unauthenticated attackers to reset system administrator passwords and achieve remote code execution; a vendor patch was released but security researchers and Shadowserver report thousands (6,000–8,500+) of internet-exposed, likely vulnerable servers and evidence of mass automated exploitation, and CISA has listed the issue as actively exploited — immediate patching or mitigations are recommended.