Tag

#time-to-exploit

1 post tagged #time-to-exploit.

Analysis · May 5, 2026 · The Field Notes Desk

48 hours from patch to exploitation: CVE-2026-23760 and the window that doesn't exist anymore

SmarterMail's patch shipped January 15. Attackers decompiled the .NET assemblies, found the fix, built a working exploit, and were inside production systems by January 17. Then they breached SmarterTools itself.