Patchfirst: MDaemon vulnerabilitieshttps://patchfirst.co/vendor/mdaemon/New and newly exploited MDaemon CVEs, with CISA KEV, EPSS and ATT&CK context. Newest 50 by publication or KEV listing.en-gb360Sat, 31 Oct 2026 05:11:25 GMT[KEV] CVE-2024-11182: MDaemon Email Server Cross-Site Scripting (XSS) Vulnerabilityhttps://patchfirst.co/cve/CVE-2024-11182/CVE-2024-11182#kevMon, 19 May 2025 00:00:00 GMTMDaemon · Email Server. In CISA KEV since 2025-05-19. ENISA EUVD lists it as exploited. EPSS 33.3% (higher than 98.4% of CVEs). CVSS 6.1 MEDIUM. ATT&CK: T1566 Phishing; T1059 Command and Scripting Interpreter; T1567 Exfiltration Over Web Service. Priority 61.9 of 100.kevT1566T1059T1567CVE-2025-3929: Stored XSS vulnerability in MDaemon Email Serverhttps://patchfirst.co/cve/CVE-2025-3929/CVE-2025-3929Tue, 29 Apr 2025 00:00:00 GMTMDaemon · Email Server. Not in CISA KEV. EPSS 0.6% (higher than 51% of CVEs). CVSS 5.3 MEDIUM. Priority 50.5 of 100.