Preliminary research

Do Smart People Ever Say They're Smart? SmarterMail Pre-Auth RCE (CVE-2025-52691)

Piotr Bazydlo and Sina Kheirkhah · watchTowr Labs · 8 January 2026

AI-collected research leads through 2 October 2026, including bounded month-by-month reviews of selected social and community sources from January through September. Unranked, incomplete, not community-vetted, and subject to change.

Reverse engineers SmarterMail's anonymous file-upload path and finds that attacker-controlled destination handling permits traversal into the web root. Uploading an ASPX payload turns the arbitrary write into pre-authentication remote code execution.

Record

Researcher

Piotr Bazydlo and Sina Kheirkhah

Published by

watchTowr Labs

Date

8 January 2026

In the archive

• Collected in the 2026 preliminary research sweep

Related sources

• Authentication-bypass follow-up

Tags

• dotnet
• file-upload
• path-traversal
• file-write
• attack-chain
• rce
• owasp-a01-2021

This page is the archive's own catalogue record. The research is the work of Piotr Bazydlo and Sina Kheirkhah, first published at the original source. Preserved copies are kept so the citation survives its host.