CVE-2025-61084 – MDaemon Mail Server Email Spoofing Vulnerability

CVE ID : CVE-2025-61084

Published : Nov. 5, 2025, 3:15 p.m. | 1 hour, 2 minutes ago

Description : MDaemon Mail Server 23.5.2 validates SPF, DKIM, and DMARC using the email enclosed in angle brackets () in the From: header of SMTP DATA. An attacker can craft a From: header with multiple invisible Unicode thin spaces to display a spoofed sender while passing validation, allowing email spoofing even when anti-spoofing protections are in place.

Severity: 0.0 | NA

Visit the link for more details, such as CVSS details, affected products, timeline, and more…