6 matches found
CVE-2026-120446
madong-admin-saas through 5.1.4 contains a missing authentication vulnerability in the platform tenant management API because the 'platformapi' middleware key never matches the 'platform' application. Unauthenticated remote attackers can call /platformapi/tenant/account, bind-plan and sync-data...
EUVD-2026-115206
madong-admin-saas through 5.1.4 contains a missing authentication vulnerability in the platform tenant management API because the 'platformapi' middleware key never matches the 'platform' application. Unauthenticated remote attackers can call /platformapi/tenant/account, bind-plan and sync-data...
CVE-2026-120446 madong-admin-saas through 5.1.4 Missing Authentication via Platform Tenant Management API
madong-admin-saas through 5.1.4 contains a missing authentication vulnerability in the platform tenant management API because the 'platformapi' middleware key never matches the 'platform' application. Unauthenticated remote attackers can call /platformapi/tenant/account, bind-plan and sync-data...
CVE-2026-120446
The madong-admin-saas software (versions through 5.1.4 ) is vulnerable to a missing authentication flaw within the platform tenant management API . This occurs because the 'platformapi' middleware key fails to match the 'platform' application. An unauthenticated remote attacker can exploit this b...
CVE-2026-120446: madong-code madong-admin-saas: madong-admin-saas through 5.1.4 contains a missing authentication vulnerability in the platform tenant management API…
madong-admin-saas through 5.1.4 contains a missing authentication vulnerability in the platform tenant management API because the 'platformapi' middleware key never matches the 'platform' application. Unauthenticated remote attackers can call /platformapi/tenant/account, bind-plan and sync-data...
PT-2026-135462
Name of the Vulnerable Software and Affected Versions madong-admin-saas versions prior to 5.1.5 Description A missing authentication issue exists in the platform tenant management API due to the platformapi middleware key failing to match the platform application. This allows unauthenticated remo...