What’s Vulnerable › Products

knadh listmonk vulnerabilities

7 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 7 published in the last 12 months.

Check whether your knadh listmonk version is affected

Latest knadh listmonk vulnerabilities

• CVE-2026-62361 — listmonk: SQL Injection in `/api/subscribers/export` bypasses table access control, leaking admin password hashes and SMTP credentials (CVSS 5.5)
• CVE-2026-34828 — listmonk: Active sessions remain valid after password reset and password change (CVSS 7.1)
• CVE-2026-34584 — listmonk: Broken Access Control in CSV Import (Unauthorized List Assignment) (CVSS 5.4)
• CVE-2026-21483 — listmonk Vulnerable to Stored XSS Leading to Admin Account Takeover (CVSS 5.4)
• CVE-2025-58430 — listmonk Vulnerable to CSRF to XSS Chain That Can Lead to Admin Account Takeover (CVSS 6.1)
• CVE-2025-49136 — listmonk's Sprig template Injection vulnerability leads to reading of Environment Variable for low privilege user (CVSS 6.5)
• CVE-2025-46011 — (CVSS 6.5)