Maddy Project

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Maddy Project records in CISA KEV

No Maddy Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

3 records

TI-2026-29007 CVE-2026-40193 · GHSA-5835-4gvc-32pc

HIGH 75

maddy is a composable, all-in-one mail server.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00419 Published 2026-04-15 Fixed in 0.9.3 CWE-90

TI-2023-12292 CVE-2023-27582 · GHSA-4g76-w3xw-2x6w

MEDIUM 51

maddy is a composable, all-in-one mail server.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01019 Published 2023-03-13 Fixed in 0.6.3 CWE-287

TI-2022-08546 CVE-2022-24732 · GHSA-6cp7-g972-w9m9

LOW 38

Maddy Mail Server is an open source SMTP compatible email server.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00409 Published 2022-03-09 Fixed in 0.5.4 CWE-324