Knadh vulnerabilities
We track 3 vulnerabilities in Knadh products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on November 13, 2026.
Latest Knadh vulnerabilities
- 7.4 High severity
listmonk: Missing Critical Step in Authentication
listmonk 6.0.0 before 7.0.0-beta.2 contains an authentication bypass vulnerability in doResetPassword that skips TOTP verification after a password reset. Attackers who can complete a reset, such as by reading the victim's reset email, obtain fully authenticat
- 7.4 High severity
listmonk: Improper Restriction of Excessive Authentication Attempts
Listmonk 6.0.0 before 7.0.0-beta.2 contains a 2FA bypass vulnerability that allows attackers with a valid password to brute-force TOTP codes because the attempt counter resets on every new password login. Attackers can repeatedly submit credentials to POST /ad
- 7.1 High severity
listmonk is a standalone, self-hosted, newsletter and mailing list manager.
listmonk is a standalone, self-hosted, newsletter and mailing list manager. From version 4.1.0 to before version 6.1.0, a session management vulnerability allows previously issued authenticated sessions to remain valid after sensitive account security changes,