Brevo – Email, SMS, Web Push, Chat, and more.

Explore Brevo – Email, SMS, Web Push, Chat, and more. vulnerabilities across all versions. Currently tracking 9 known vulnerabilities, including severity, impact, and patch status.

Strategic Overview

Avg CVSSMedium

5.9/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all Brevo – Email, SMS, Web Push, Chat, and more. vulnerabilities before they are exploited.

Vulnerability Records

9 records


2026-02-17 00:00	Brevo - Email, SMS, Web Push, Chat, and more. <= 3.3.0 - Unauthenticated Authorization Bypass via Type Juggling Brevo <= 3.3.0	`CVE-2025-14799`	6.5 Medium	ISMAILSHADOW	Yes
2024-10-09 00:00	Newsletter, SMTP, Email marketing and Subscribe forms by Brevo (formely Sendinblue) <= 3.1.87 - Cross-Site Request Forgery Brevo <= 3.1.87	`CVE-2024-8477`	4.3 Medium	Joshua Chan	Yes
2024-08-16 00:00	Newsletter, SMTP, Email marketing and Subscribe forms by Sendinblue <= 3.1.82 - Cross-Site Request Forgery Brevo <= 3.1.82	`CVE-2024-43287`	4.3 Medium	Rafie Muhammad	Yes
2024-06-03 00:00	Newsletter, SMTP, Email marketing and Subscribe forms by Sendinblue <= 3.1.77 - Reflected Cross-Site Scripting Brevo <= 3.1.77	`CVE-2024-35668`	6.1 Medium	Rafie Muhammad	Yes
2024-03-22 00:00	Newsletter, SMTP, Email marketing and Subscribe forms by Brevo (formely Sendinblue) <= 3.1.77 - Reflected Cross-Site Scripting Brevo <= 3.1.77	`CVE-2026-15297`	6.1 Medium	stealthcopter	Yes
2023-05-10 00:00	Newsletter, SMTP, Email marketing and Subscribe forms by Sendinblue <= 3.1.60 - Reflected Cross-Site Scripting via 'lang' Brevo <= 3.1.60	`CVE-2023-2472`	6.1 Medium	Erwan LR	Yes
2022-04-08 00:00	Newsletter, SMTP, Email marketing and Subscribe forms by Sendinblue <= 3.1.39 - Cross-Site Scripting Brevo <= 3.1.39	`N/A`	7.2 High	Unknown	Yes
2022-01-12 00:00	Newsletter, SMTP, Email marketing and Subscribe forms by Sendinblue <= 3.1.30 - Reflected Cross-Site Scripting via lang & pid Parameters Brevo < 3.1.31	`CVE-2021-24874`	6.1 Medium	ZhongFu Su	Yes
2021-12-23 00:00	Newsletter, SMTP, Email marketing and Subscribe forms by Sendinblue <= 3.1.24 - Reflected Cross-Site Scripting Brevo < 3.1.25	`CVE-2021-24923`	6.1 Medium	ZhongFu Su	Yes

Showing 1–9 of 9 reports