CVE-2026-34828

CVE-2026-34828 listmonk 密码重置与密码更改后的会话持久化 简介 我在审查 listmonk （一款开源新闻通讯与邮件列表管理器）时，带着一个简单的安全问题发现了这个问题： 当用户更改或重置密码时，应用程序是否真的终止了已颁发的会话？ 在本例中，答案是否定的。 之前颁发的已验证会话在以下两种情况下仍然有效： 密码重置 密码更改 这意味着，即便用户依赖账户恢复的安全事件已经发生，被盗用的会话 cookie 仍然可以存活。 此问题已被确认并分配了 CVE-2026-34828 。 项目： GitHub 上的 listmonk CVE： CVE-2026-34828...

GHSA-VFP3-V2GW-7WFQ vulnerabilities

Vulnerabilities for packages: listmonk, falcosidekick-ui, temporal-fips, temporal, kube-metrics-adapter-fips, falcosidekick-ui-fips, temporal-ui-server-fips, kube-metrics-adapter, temporal-ui-server...

GO-2025-4239 vulnerabilities

Vulnerabilities for packages: listmonk...

GO-2026-4815 vulnerabilities

Vulnerabilities for packages: listmonk, mattermost-fips, hugo, seaweedfs-operator, mailpit, hugo-extended, rclone, mailpit-fips, seaweedfs, seaweedfs-fips, hugo-fips, rclone-fips, mattermost, seaweedfs-operator-fips, ollama-fips, ollama...

GO-2026-5066 vulnerabilities

Vulnerabilities for packages: listmonk, mattermost-fips, hugo, seaweedfs-operator, rclone, seaweedfs-fips, seaweedfs, rclone-fips, mattermost, seaweedfs-operator-fips, gitlab-workhorse-ce...

GO-2026-5320 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-applicationinsights, crossplane-provider-aws-sesv2, crossplane-provider-aws-apigateway, crossplane-provider-aws-emrserverless-fips, crossplane-provider-aws-memorydb-fips, crossplane-provider-aws-kinesisanalyticsv2,...

CVE-2026-62361

listmonk is a standalone, self-hosted, newsletter and mailing list manager. Prior to 6.2.0, listmonk’s GET /api/subscribers/export endpoint injects the user-controlled query parameter into QuerySubscribersForExport in internal/core/subscribers.go without calling validateQueryTables, unlike GET...

CVE-2026-62361

listmonk is a standalone, self-hosted, newsletter and mailing list manager. Prior to 6.2.0, listmonk’s GET /api/subscribers/export endpoint injects the user-controlled query parameter into QuerySubscribersForExport in internal/core/subscribers.go without calling validateQueryTables, unlike GET...

CVE-2026-62361 listmonk: SQL Injection in `/api/subscribers/export` bypasses table access control, leaking admin password hashes and SMTP credentials

listmonk is a standalone, self-hosted, newsletter and mailing list manager. Prior to 6.2.0, listmonk’s GET /api/subscribers/export endpoint injects the user-controlled query parameter into QuerySubscribersForExport in internal/core/subscribers.go without calling validateQueryTables, unlike GET...

CVE-2026-62361

CVE-2026-62361 affects listmonk prior to version 6.2.0. The vulnerability arises in the GET /api/subscribers/export endpoint, which injects a user-controlled query parameter into QuerySubscribersForExport without calling validateQueryTables, unlike GET /api/subscribers. An authenticated user with...

CVE-2026-62361 listmonk: SQL Injection in `/api/subscribers/export` bypasses table access control, leaking admin password hashes and SMTP credentials

listmonk is a standalone, self-hosted, newsletter and mailing list manager. Prior to 6.2.0, listmonk’s GET /api/subscribers/export endpoint injects the user-controlled query parameter into QuerySubscribersForExport in internal/core/subscribers.go without calling validateQueryTables, unlike GET...

listmonk Admin Authentication / Password Flow Security Assessment Module

This Metasploit auxiliary module is a web application security testing tool designed to evaluate authentication and password management logic in a Listmonk admin panel deployment...

CVE-2026-34584

listmonk is a standalone, self-hosted, newsletter and mailing list manager. From version 4.1.0 to before version 6.1.0, bugs in list permission checks allows users in a multi-user environment to access to lists which they don't have access to under different scenarios. This only affects multi-use...

CVE-2026-34828

listmonk is a standalone, self-hosted, newsletter and mailing list manager. From version 4.1.0 to before version 6.1.0, a session management vulnerability allows previously issued authenticated sessions to remain valid after sensitive account security changes, specifically password reset and...

CVE-2026-34828

listmonk is a standalone, self-hosted, newsletter and mailing list manager. From version 4.1.0 to before version 6.1.0, a session management vulnerability allows previously issued authenticated sessions to remain valid after sensitive account security changes, specifically password reset and...

CVE-2026-34584

listmonk is a standalone, self-hosted, newsletter and mailing list manager. From version 4.1.0 to before version 6.1.0, bugs in list permission checks allows users in a multi-user environment to access to lists which they don't have access to under different scenarios. This only affects multi-use...

CVE-2026-34828 listmonk: Active sessions remain valid after password reset and password change

listmonk is a standalone, self-hosted, newsletter and mailing list manager. From version 4.1.0 to before version 6.1.0, a session management vulnerability allows previously issued authenticated sessions to remain valid after sensitive account security changes, specifically password reset and...

CVE-2026-34828

CVE-2026-34828 affects listmonk, a standalone self-hosted newsletter manager. A session-management vulnerability in versions 4.1.0 up to, but not including, 6.1.0 allows already-authenticated sessions to remain valid after password reset or password change, enabling an attacker with a valid sessi...

CVE-2026-34828 listmonk: Active sessions remain valid after password reset and password change

listmonk is a standalone, self-hosted, newsletter and mailing list manager. From version 4.1.0 to before version 6.1.0, a session management vulnerability allows previously issued authenticated sessions to remain valid after sensitive account security changes, specifically password reset and...

CVE-2026-34828 listmonk: Active sessions remain valid after password reset and password change

listmonk is a standalone, self-hosted, newsletter and mailing list manager. From version 4.1.0 to before version 6.1.0, a session management vulnerability allows previously issued authenticated sessions to remain valid after sensitive account security changes, specifically password reset and...