Vulnerabilidades en knadh
6 resultadosAnálisis Vexday
A knadh apresenta um perfil de risco moderado com 6 vulnerabilidades catalogadas, sendo 1 crítica (CVSS 9.0+) e nenhuma sob exploração ativa conhecida. A fraqueza dominante é Cross-Site Scripting (CWE-79), típica de aplicações web, com 1 vulnerabilidade publicada nos últimos 90 dias indicando descobertas recentes. Apesar da ausência de KEVs, a presença de CVE crítica e descobertas recentes justifica monitoramento contínuo.
CVE-2025-49136CRITICALlistmonk's Sprig template Injection vulnerability leads to reading of Environment Variable for low privilege userEPSS 1.4%CVE-2026-62361MEDIUMlistmonk: SQL Injection in `/api/subscribers/export` bypasses table access control, leaking admin password hashes and SMTP credentialsEPSS 0.4%CVE-2026-34828HIGHlistmonk: Active sessions remain valid after password reset and password changeEPSS 0.3%CVE-2026-21483MEDIUMlistmonk Vulnerable to Stored XSS Leading to Admin Account TakeoverEPSS 0.2%CVE-2026-34584MEDIUMlistmonk: Broken Access Control in CSV Import (Unauthorized List Assignment)EPSS 0.2%CVE-2025-58430HIGHlistmonk Vulnerable to CSRF to XSS Chain That Can Lead to Admin Account TakeoverEPSS 0.1%