CVE-2025-13052

Name of the Vulnerable Software and Affected Versions ADM versions 4.1.0 through 4.3.3.RKD2 ADM versions 5.0.0 through 5.1.0.RN42

Description An improperly validated TLS/SSL certificate when sending emails to an SMTP server via msmtp allows an attacker intercepting network traffic to execute a man-in-the-middle (MITM) attack, potentially obtaining sensitive SMTP information. The attack occurs when a user configures notifications to send emails.

Recommendations Update ADM to a version later than 4.3.3.RKD2 Update ADM to a version later than 5.1.0.RN42