SmarterMail EUVD-2026-25856

Exploitation requires that the SmarterMail file/email sharing feature be in use and that the attachment download endpoint be network-reachable by the attacker, since that endpoint is the oracle used to recover the System.Random seed; the target must be running a build prior to 9610. No authentication and no user interaction are needed (PR:N/UI:N), and no prior access to the targeted content is required. What limits exploitation: the AC:H attack complexity - the attacker must send many requests to brute-force the ~19,000-value seed space through the oracle, so it is not a single-shot exploit; impact is confined to reading content (no integrity or availability impact); and it is not automatable per CISA SSVC. Restricting or authenticating access to the sharing/download endpoints removes the oracle and blocks the attack.

Signals are internally consistent and point to a real but non-trivial-to-exploit confidentiality issue rather than a mass-exploitation emergency. The CVSS 4.0 vector (AV:N/AC:H/AT:N/PR:N/UI:N/VC:H) and score of 8.2 reflect network reach and unauthenticated access but explicitly high attack complexity, matching the multi-request oracle brute force over ~19,000 seeds. Impact is confidentiality-only (VC:H, VI:N/VA:N) - the attacker reads content but does not modify or deny service. EPSS is very low (0.03%, 7th percentile) and CISA SSVC records Exploitation: none, Automatable: no, Technical Impact: partial, and this is not in KEV. There is no evidence of active exploitation or public POC. The main risk driver is that no prior access to the targeted content is needed, so successful exploitation exposes any user's mail and files. Net: a legitimate high-severity data-disclosure bug worth prioritized patching for internet-exposed SmarterMail, but not a drop-everything, wormable threat.

An attacker who knows a target SmarterMail hostname repeatedly queries the unauthenticated attachment download endpoint, using its responses as an oracle to identify which of the ~19,000 System.Random seeds is in use. With the seed recovered, they reconstruct the DES key and IV, forge a valid sharing token for any email, attachment, or stored file, and download the victim's content without ever having credentials or a legitimate share link. No public exploit code is identified at time of analysis, and the high-complexity oracle brute force limits this to a motivated, targeted attacker.