All 3 CVE vulnerabilities found in Brevo – Email, SMS, Web Push, Chat, and more., with AI-generated Chinese analysis, references, and POCs.
Vendor: neeraj_slit
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-15297 | Newsletter, SMTP, Email marketing and Subscribe forms by Brevo (formely Sendinblue) <= 3.1.77 - Reflected Cross-Site Scripting CWE-79 | 6.1 | Medium | 2026-07-10 |
| CVE-2025-14799 | Brevo - Email, SMS, Web Push, Chat, and more. <= 3.3.0 - Unauthenticated Authorization Bypass via Type Juggling CWE-843 | 6.5 | Medium | 2026-02-18 |
| CVE-2024-8477 | Newsletter, SMTP, Email marketing and Subscribe forms by Brevo (formely Sendinblue) <= 3.1.87 - Cross-Site Request Forgery CWE-352 | 4.3 | Medium | 2024-10-10 |
All 3 known CVE vulnerabilities affecting Brevo – Email, SMS, Web Push, Chat, and more. with full Chinese analysis, references, and POCs where available.