CVE-2026-72741

Rainbond through 6.9.7 contains a broken access control vulnerability in the CheckToken function that allows authenticated attackers to access unauthorized enterprise resources by substituting another enterprise's tenant name in URL paths. Attackers can use any valid API token to bypass enterpris...

CVE-2026-72741 Rainbond 6.9.7 Region API Cross-Enterprise IDOR via Tenant Access

Rainbond through 6.9.7 contains a broken access control vulnerability in the CheckToken function that allows authenticated attackers to access unauthorized enterprise resources by substituting another enterprise's tenant name in URL paths. Attackers can use any valid API token to bypass enterpris...

CVE-2026-72741 Rainbond 6.9.7 Region API Cross-Enterprise IDOR via Tenant Access

Rainbond through 6.9.7 contains a broken access control vulnerability in the CheckToken function that allows authenticated attackers to access unauthorized enterprise resources by substituting another enterprise's tenant name in URL paths. Attackers can use any valid API token to bypass enterpris...

EUVD-2026-58190

Rainbond through 6.9.7 contains a broken access control vulnerability in the CheckToken function that allows authenticated attackers to access unauthorized enterprise resources by substituting another enterprise's tenant name in URL paths. Attackers can use any valid API token to bypass enterpris...

CVE-2026-72741

Rainbond up to version 6.9.7 is affected by a broken access control in the CheckToken function, enabling authenticated attackers to substitute another enterprise’s tenant name in URL paths and bypass enterprise ID verification to access or modify resources. Impact includes access to or modificati...

PT-2026-71718

Name of the Vulnerable Software and Affected Versions Rainbond versions prior to 6.9.8 Description Broken access control exists in the CheckToken function. Authenticated attackers can access unauthorized enterprise resources by substituting another enterprise's tenant name within URL paths. By...

Rainbond has a logic flaw vulnerability (CNVD-2023-29097)

Rainbond is a cloud-native application management platform. Rainbond suffers from a logic flaw vulnerability that can be exploited by an attacker to reset arbitrary user passwords...

Rainbond has a logic flaw vulnerability (CNVD-2023-29035)

Rainbond is a cloud-native application management platform. Rainbond suffers from a logic flaw vulnerability that can be exploited by attackers to obtain sensitive information...

Rainbond has a flawed logic vulnerability

Rainbond is a cloud-native application management platform. Rainbond suffers from a logic flaw vulnerability that can be exploited by attackers to obtain sensitive information...

File Upload Vulnerability in Rainbond

Rainbond is a cloud-native application management platform. Rainbond suffers from a file upload vulnerability that can be exploited by an attacker to gain server privileges...