79% vs 51%: independent neobanks lag on app security. Read the report

Tag

#listmonk

1 articles

Deep Dive

Listmonk 2FA Bypass, Fixed Only in 7.0 Beta (CVE-2026-128332)

listmonk 6.0.0 through 6.2.0 lets an attacker with a password bypass TOTP 2FA; the only fixed release is 7.0.0-beta.2.

Ostorlab Team
Nov 13, 2026