Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: Mailerup Clear all filters
TI-2026-11177 CVE-2026-13164 · GHSA-cwqp-w2pg-8772

Unauthenticated self-registration in MailerUp allows access to stored email data

Priority MEDIUM 45

Missing Authentication for Critical Function (CWE-306) in the RegisterView (apps/accounts/views.py), exposed at POST /api/auth/register/, in MailerUp <1.0.1 allows a remote, unauthenticated attacker to self-register a wo…

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.0071 Published 2026-06-24 Fixed in 1.0.1 CWE-306
TI-2026-11176 CVE-2026-13163 · GHSA-wfgr-g7h2-c6m6

Lack of input validation in Mailerup input parameter leads to Open Redirect

Priority LOW 25

Open redirect vulnerability (CWE-601) in the _safe_redirect function of the click-tracking endpoint (/c/<token>/) in Mailerup <1.0.0 on all platforms allows remote unauthenticated attackers to redirect victims to arbitra…

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.0051 Published 2026-06-24 Fixed in 1.0.1 CWE-601