Exploitation ongoing with high activity in latest observed window (7 mentions)
Recommended action window: Immediate (within 24h)
NVD description
An XSS issue was discovered in MDaemon Email Server before version 24.5.1c. An attacker can send an HTML e-mail message with JavaScript in an img tag. This could allow a remote attacker to load arbitrary JavaScript code in the context of a webmail user's browser window.
Listed in the CISA Known Exploited Vulnerabilities catalog. Federal remediation due date: 2025-06-09. Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Priority
LOW
Exploitation
ACTIVE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
Top 5 Trending CVEs: 1 - CVE-2026-31431 2 - CVE-2021-3156 3 - CVE-2025-14847 4 - CVE-2024-27867 5 - CVE-2024-11182 #cve #cvetrends #cveshield #cybersecurity https://www.cveshield.com/dashboard
Post summary
The post merely lists five trending CVE identifiers without any accompanying vulnerability details or mitigation information.
00:14 UTC: Thread live on @lyrie_ai. What happened CISA added CVE-2024-11182 to the Known Exploited Vulnerabilities (KEV) catalog, signaling observed exploitation in the wild against MDaemon Email Server CISA KEV.
Post summary
CISA has listed CVE‑2024‑11182 in its Known Exploited Vulnerabilities catalog, confirming that the vulnerability is being actively exploited in the wild against MDaemon Email Server.
00:03 UTC: Lyrie Sentinel flagged it. What happened CISA added CVE-2024-11182 to the Known Exploited Vulnerabilities (KEV) catalog, signaling observed exploitation in the wild against MDaemon Email Server CISA KEV.
Post summary
CISA listed CVE-2024-11182 in its Known Exploited Vulnerabilities catalog, indicating confirmed real‑world exploitation against MDaemon Email Server.
00:11 UTC: GPT-5 enrichment complete. 698 words. 3 citations. What happened CISA added CVE-2024-11182 to the Known Exploited Vulnerabilities (KEV) catalog, signaling observed exploitation in the wild against MDaemon Email Server CISA KEV.
Post summary
The CVE-2024-11182 has been added to the CISA Known Exploited Vulnerabilities catalog, indicating that it is being actively exploited in the wild against the MDaemon Email Server.
03:00 UTC: First exploit attempt in the wild. What happened CISA added CVE-2024-11182 to the Known Exploited Vulnerabilities (KEV) catalog, signaling observed exploitation in the wild against MDaemon Email Server CISA KEV.
Post summary
CISA confirmed that CVE-2024-11182 is being actively exploited in the wild against MDaemon Email Server, warranting its inclusion in the Known Exploited Vulnerabilities catalog.
00:00 UTC: CVE-2024-11182 disclosed. CISA: CVE-2024-11182 added to Known Exploited Vulnerabilities — MDaemon Email Server What happened CISA added CVE-2024-11182 to the Known Exploited Vulnerabilities (KEV) catalog, signaling observed exploitation in the wild against…
Post summary
CISA has added CVE-2024-11182 to its Known Exploited Vulnerabilities catalog, signaling that this vulnerability is being actively exploited against MDaemon Email Server.
https://research.lyrie.ai/research/active-exploit-cve-2024-11182-email-server #lyrie #cybersecurity #CVE #threatintel #zerodayattack
Post summary
The post indicates that CVE‑2024‑11182 is being actively exploited in email servers, yet it offers no proof‑of‑concept, exploit code, technical specifics, or patch information.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | mdaemon | mdaemon | - | - | - |