CVE-2026-128334

The listmonk email marketing system (versions 6.2.0 before 7.0.0-beta.2) is vulnerable to missing authentication in its Azure Bounce Webhook implementation. When no shared secret is configured, unauthenticated attackers can submit forged EmailDeliveryReportReceived events with a Bounced status to...