Skip to content
OpenAdvisories

Vendor

knadh

9 known vulnerabilities.

Products

listmonk 9
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 9.1
    CVE-2026-128332

    Listmonk 6.0.0 before 7.0.0-beta.2 contains a 2FA bypass vulnerability that allows attackers with a valid password to b…

    knadh listmonk
  • Critical 9.1
    CVE-2026-128333

    listmonk 6.0.0 before 7.0.0-beta.2 contains an authentication bypass vulnerability in doResetPassword that skips TOTP v…

    knadh listmonk
  • Critical 9.1
    CVE-2025-49136 Public exploit

    listmonk's Sprig template Injection vulnerability leads to reading of Environment Variable for low privilege user

    listmonk is a standalone, self-hosted, newsletter and mailing list manager. Starting in version 4.0.0 and prior to version 5.0.2, the `env` and `expandenv` template functions which is enabled by default in Sprig enables capturing of env variables on host. Whi…

    knadh listmonk github.com/knadh/listmonk Go