Email Spoofing Vulnerability in MDaemon Mail Server

CVE-2025-61084

What is CVE-2025-61084?

MDaemon Mail Server version 23.5.2 contains a vulnerability whereby it fails to properly validate SPF, DKIM, and DMARC records due to an incorrect interpretation of the From: header in SMTP DATA. Attackers can exploit this weakness by creating a From: header embedded with multiple invisible Unicode thin spaces. This manipulation allows malicious actors to spoof email senders effectively while evading existing anti-spoofing measures. As a result, organizations relying on MDaemon Mail Server for email communication face increased risks of phishing attacks and identity deception.

References