listmonk vulnerabilities and fixes

Recent CVEs affecting listmonk, with upgrade or downgrade steps. 2 tracked.

listmonk has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2026-04-02. Highest priority: CVE-2026-34828 (score 35/100).

• CVE-2026-34828 HIGH 7.1 UPGRADE listmonk is a standalone, self-hosted, newsletter and mailing list manager
• CVE-2026-34584 MEDIUM 5.4 UPGRADE listmonk is a standalone, self-hosted, newsletter and mailing list manager

FAQ

How do I fix listmonk vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is listmonk being exploited right now?

None of the tracked listmonk CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which listmonk CVE should I patch first?

CVE-2026-34828 currently ranks highest (35/100): listmonk is a standalone, self-hosted, newsletter and mailing list manager.

← Back to latest CVEs