CSA Issues Alert on Critical SmarterMail Bug Allowing Remote Code Execution
Singapore’s CSA warns of a CVSS 10.0 SmarterMail vulnerability allowing unauthenticated remote code execution via file upload; patch available.
More info