Most recent entries from all https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 13 Nov 2026 21:14:45 +0000 CVE-2026-128333 — listmonk 6.0.0 before 7.0.0-beta.2 2FA Bypass via Password Reset Flow https://db.gcve.eu/vuln/cve-2026-128333 <p><strong>Affected:</strong> knadh listmonk</p> <p>listmonk 6.0.0 before 7.0.0-beta.2 contains an authentication bypass vulnerability in doResetPassword that skips TOTP verification after a password reset. Attackers who can complete a reset, such as by reading the victim&#39;s reset email, obtain fully authenticated sessions including Super Admin without the TOTP code.</p> <p><strong>Affected:</strong> knadh listmonk</p> <p>listmonk 6.0.0 before 7.0.0-beta.2 contains an authentication bypass vulnerability in doResetPassword that skips TOTP verification after a password reset. Attackers who can complete a reset, such as by reading the victim&#39;s reset email, obtain fully authenticated sessions including Super Admin without the TOTP code.</p> https://db.gcve.eu/vuln/cve-2026-128333