Read the docs

Mailerup

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Mailerup records in CISA KEV

No Mailerup vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2026-11177 CVE-2026-13164 · GHSA-cwqp-w2pg-8772

Unauthenticated self-registration in MailerUp allows access to stored email data

Priority MEDIUM 45

Missing Authentication for Critical Function (CWE-306) in the RegisterView (apps/accounts/views.py), exposed at POST /api/auth/register/, in MailerUp <1.0.1 allows a remote, unauthenticated attacker to self-register a wo…

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.0071 Published 2026-06-24 Fixed in 1.0.1 CWE-306
TI-2026-11176 CVE-2026-13163 · GHSA-wfgr-g7h2-c6m6

Lack of input validation in Mailerup input parameter leads to Open Redirect

Priority LOW 25

Open redirect vulnerability (CWE-601) in the _safe_redirect function of the click-tracking endpoint (/c/<token>/) in Mailerup <1.0.0 on all platforms allows remote unauthenticated attackers to redirect victims to arbitra…

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.0051 Published 2026-06-24 Fixed in 1.0.1 CWE-601
Open these records in search →