Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API docsPage
  • MCP serverPage
  • AboutPage
  • Data sourcesPage
  • Data statusPage
  • ChangelogPage
  • How it's builtPage
  • Support the projectPage

14 results

knadh vulnerabilities

6 published CVEs name knadh among the affected products.

Newest CVEs

  • CVE-2026-62361

    listmonk: SQL Injection in `/api/subscribers/export` bypasses table access control, leaking admin password hashes and SMTP credentials

    knadh · listmonk

    Medium5.5
  • CVE-2026-34828

    listmonk: Active sessions remain valid after password reset and password change

    knadh · listmonk

    High7.1
  • CVE-2026-34584

    listmonk: Broken Access Control in CSV Import (Unauthorized List Assignment)

    knadh · listmonk

    Medium5.4
  • CVE-2026-21483

    listmonk Vulnerable to Stored XSS Leading to Admin Account Takeover

    knadh · listmonk

    Medium5.4
  • CVE-2025-58430

    listmonk Vulnerable to CSRF to XSS Chain That Can Lead to Admin Account Takeover

    knadh · listmonk

    High8.6
  • CVE-2025-49136

    listmonk's Sprig template Injection vulnerability leads to reading of Environment Variable for low privilege user

    knadh · listmonk

    Critical9.1