CVE-2026-128333 | knadh Listmonk up to 7.0.0-beta.1 TOTP Verification doResetPassword improper authentication

November 13, 2026 Yanac

A vulnerability, which was classified as critical, was found in knadh Listmonk up to 7.0.0-beta.1. Affected by this issue is the function doResetPassword of the component TOTP Verification. The manipulation results in improper authentication.

This vulnerability was named CVE-2026-128333. The attack may be performed from remote. There is no available exploit.

You should upgrade the affected component.VulDB Recent EntriesRead More