TI-2026-44510 CVE-2026-62361 · GHSA-xgjr-7j9q-2h4r
SQL injection in knadh listmonk
Priority MEDIUM 58
listmonk is a standalone, self-hosted, newsletter and mailing list manager.
Vulnerabilities
7 records
TI-2026-27072 CVE-2026-34828 · GHSA-h5j9-cvrw-v5qh
listmonk: Active sessions remain valid after password reset and password change
Priority MEDIUM 64
listmonk is a standalone, self-hosted, newsletter and mailing list manager.
TI-2026-26831 CVE-2026-34584
listmonk: Broken Access Control in CSV Import (Unauthorized List Assignment)
Priority LOW 24
listmonk is a standalone, self-hosted, newsletter and mailing list manager.
TI-2026-17337 CVE-2026-21483 · GHSA-jmr4-p576-v565
listmonk Vulnerable to Stored XSS Leading to Admin Account Takeover
Priority MEDIUM 64
listmonk is a standalone, self-hosted, newsletter and mailing list manager.
TI-2025-36190 CVE-2025-58430 · GHSA-rf24-wg77-gq7w
listmonk Vulnerable to CSRF to XSS Chain That Can Lead to Admin Account Takeover
Priority HIGH 72
listmonk is a standalone, self-hosted, newsletter and mailing list manager.
TI-2025-31216 CVE-2025-49136 · GHSA-jc7g-x28f-3v3h
listmonk's Sprig template Injection vulnerability leads to reading of Environment Variable for low privilege user
Priority HIGH 74
listmonk is a standalone, self-hosted, newsletter and mailing list manager.
TI-2025-28914 CVE-2025-46011 · GHSA-2jrq-xcm6-56wv
Listmonk v4.1.0 (fixed in v5.0.0) is vulnerable to SQL Injection in the QuerySubscribers…
Priority LOW 31
Listmonk v4.1.0 (fixed in v5.0.0) is vulnerable to SQL Injection in the QuerySubscribers function which allows attackers to escalate privileges.