Records7All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9
Exploited now
knadh records in CISA KEVNo knadh vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority HIGH 74
listmonk is a standalone, self-hosted, newsletter and mailing list manager.
CVSS 3.1CRITICAL 9.1· Network · Low privileges · User interaction · EPSS 0.01648 · Published 2025-06-09 · Fixed in 5.0.2 CWE-1336
Priority HIGH 72
listmonk is a standalone, self-hosted, newsletter and mailing list manager.
CVSS 4.0HIGH 8.6· Network · No auth · User interaction · EPSS 0.00136 · Published 2025-09-09 · No fix listed CWE-352
Priority MEDIUM 64
listmonk is a standalone, self-hosted, newsletter and mailing list manager.
CVSS 3.1HIGH 7.1· Network · Low privileges · No interaction · EPSS 0.00312 · Published 2026-04-02 · Fixed in 6.1.0, 1.1.1-0.20260329113754-1b5e8d38c778 CWE-613
Priority MEDIUM 64
listmonk is a standalone, self-hosted, newsletter and mailing list manager.
CVSS 4.0MEDIUM 5.4· Network · Low privileges · No interaction · EPSS 0.00226 · Published 2026-01-02 · Fixed in 6.0.0, 1.1.1-0.20251231125615-74dc5a01cfbb CWE-79
Priority MEDIUM 58
listmonk is a standalone, self-hosted, newsletter and mailing list manager.
CVSS 3.1MEDIUM 5.5· Network · High privileges · No interaction · EPSS 0.00297 · Published 2026-07-15 · Fixed in 6.2.0, 1.1.1-0.20260619102436-c0a6525009a6 CWE-89
Priority LOW 31
Listmonk v4.1.0 (fixed in v5.0.0) is vulnerable to SQL Injection in the QuerySubscribers function which allows attackers to escalate privileges.
CVSS 3.1MEDIUM 6.5· Network · No auth · No interaction · EPSS 0.00304 · Published 2025-06-04 · No fix listed CWE-89
Priority LOW 24
listmonk is a standalone, self-hosted, newsletter and mailing list manager.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · No interaction · EPSS 0.00178 · Published 2026-04-02 · Fixed in 6.1.0 CWE-639
THREATIST.IORead the docs