SmarterMail Admin Password Reset Attempt

Tim Peck@timpeck

•updated Jan 23, 2026•1•43

Detects attempts to exploit the SmarterMail authentication bypass vulnerability (WT-2026-0001) by sending a POST request to the /api/v1/auth/force-reset-password endpoint with 'IsSysAdmin' set to 'true'.