{"version":"https://jsonfeed.org/version/1.1","title":"Patchfirst: MDaemon vulnerabilities","home_page_url":"https://patchfirst.co/vendor/mdaemon/","feed_url":"https://patchfirst.co/feed/vendor/mdaemon.json","description":"New and newly exploited MDaemon CVEs, with CISA KEV, EPSS and ATT&CK context. Newest 50 by publication or KEV listing.","language":"en-GB","items":[{"id":"CVE-2024-11182#kev","url":"https://patchfirst.co/cve/CVE-2024-11182/","title":"[KEV] CVE-2024-11182: MDaemon Email Server Cross-Site Scripting (XSS) Vulnerability","content_text":"MDaemon · Email Server. In CISA KEV since 2025-05-19. ENISA EUVD lists it as exploited. EPSS 33.3% (higher than 98.4% of CVEs). CVSS 6.1 MEDIUM. ATT&CK: T1566 Phishing; T1059 Command and Scripting Interpreter; T1567 Exfiltration Over Web Service. Priority 61.9 of 100.","summary":"MDaemon Email Server Cross-Site Scripting (XSS) Vulnerability","date_published":"2025-05-19T00:00:00.000Z","date_modified":"2026-06-17T06:57:13.000Z","tags":["kev","T1566","T1059","T1567"],"_patchfirst":{"reason":"kev","priority":61.9,"kev":{"dateAdded":"2025-05-19","ransomware":false},"epss":{"score":0.33259,"percentile":0.98367},"cvss":{"score":6.1,"severity":"MEDIUM","version":"3.1"},"vendor":"MDaemon","product":"Email Server","techniqueIds":["T1566","T1059","T1567"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2025-3929","url":"https://patchfirst.co/cve/CVE-2025-3929/","title":"CVE-2025-3929: Stored XSS vulnerability in MDaemon Email Server","content_text":"MDaemon · Email Server. Not in CISA KEV. EPSS 0.6% (higher than 51% of CVEs). CVSS 5.3 MEDIUM. Priority 50.5 of 100.","summary":"Stored XSS vulnerability in MDaemon Email Server","date_published":"2025-04-29T00:00:00.000Z","date_modified":"2025-04-29T13:19:29.000Z","tags":[],"_patchfirst":{"reason":"published","priority":50.5,"kev":null,"epss":{"score":0.00647,"percentile":0.50964},"cvss":{"score":5.3,"severity":"MEDIUM","version":"4.0"},"vendor":"MDaemon","product":"Email Server","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}}]}