CVE-2019-13612: MDaemon Email Server 19 through 20.0.1 skips SpamAssassin checks by default for e-mail messages larger than...

Security readout for executives and security teams

MDaemon Email Server 19 through 20.0.1 may let larger emails avoid SpamAssassin filtering under default settings. That does not prove compromise, but it can weaken email risk controls by leaving some large messages less inspected than expected. Organizations using MDaemon Email Server 19 through 20.0.1 and relying on SpamAssassin for mail threat detection are the likely exposure group, especially if they accept legitimate or unsolicited messages above 2 MB. Treat this as an email security control gap, not evidence of breach. Prioritize review where MDaemon is internet-facing or relied upon as the primary malware and spam filter. Mitigation focus: Check vendor guidance for fixed versions or recommended configuration changes.; Review MDaemon and SpamAssassin message-size scanning limits.; Use layered email security for large messages and attachments..

Prepared

Jun 6, 2026, 20:22 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.