TI-2026-29007 CVE-2026-40193 · GHSA-5835-4gvc-32pc
Maddy Mail Server: LDAP Filter Injection via Unsanitized Username
Priority HIGH 75
maddy is a composable, all-in-one mail server.
foxcpp
Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9
Exploited now
foxcpp records in CISA KEVNo foxcpp vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
4 records
TI-2023-12292 CVE-2023-27582 · GHSA-4g76-w3xw-2x6w
Full authentication bypass if SASL authorization username is specified
Priority MEDIUM 51
maddy is a composable, all-in-one mail server.
TI-2022-08546 CVE-2022-24732 · GHSA-6cp7-g972-w9m9
Maddy Mail Server does not implement account expiry
Priority LOW 38
Maddy Mail Server is an open source SMTP compatible email server.
TI-2021-18860 CVE-2021-42583 · GHSA-5r5w-h76p-m726
A Broken or Risky Cryptographic Algorithm exists in Max Mazurov Maddy before 0.5.2, which…
Priority LOW 34
A Broken or Risky Cryptographic Algorithm exists in Max Mazurov Maddy before 0.5.2, which is an unnecessary risk that may result in the exposure of sensitive information.