{"items":[{"id":"CVE-2026-40193","published":"2026-04-15T23:15:25.011Z","updated":"2026-04-16T14:23:52.438Z","title":"Maddy Mail Server: LDAP Filter Injection via Unsanitized Username","severity":"HIGH","score":8.2,"vendor":"foxcpp","product":"maddy","kev":false,"epss":0.00419,"kevAdded":null},{"id":"CVE-2023-27582","published":"2023-03-13T21:40:23.225Z","updated":"2025-02-25T14:58:06.143Z","title":"Full authentication bypass if SASL authorization username is specified","severity":"CRITICAL","score":9.1,"vendor":"foxcpp","product":"maddy","kev":false,"epss":0.01019,"kevAdded":null},{"id":"CVE-2022-24732","published":"2022-03-09T19:40:08.000Z","updated":"2025-04-23T18:56:33.643Z","title":"Maddy Mail Server does not implement account expiry","severity":"MEDIUM","score":6.3,"vendor":"foxcpp","product":"maddy","kev":false,"epss":0.00409,"kevAdded":null}]}