CVE-2026-120445

madong-admin-saas through 5.1.4 contains an incorrect authorization vulnerability in AccessTokenMiddleware that allows authenticated tenant users to access the platform management API in multi-tenant mode. Attackers can reuse a tenant login JWT against /platformapi controllers to create platform...

CVE-2026-120445 madong-admin-saas through 5.1.4 Incorrect Authorization via /platformapi AccessTokenMiddleware

madong-admin-saas through 5.1.4 contains an incorrect authorization vulnerability in AccessTokenMiddleware that allows authenticated tenant users to access the platform management API in multi-tenant mode. Attackers can reuse a tenant login JWT against /platformapi controllers to create platform...

EUVD-2026-115205

madong-admin-saas through 5.1.4 contains an incorrect authorization vulnerability in AccessTokenMiddleware that allows authenticated tenant users to access the platform management API in multi-tenant mode. Attackers can reuse a tenant login JWT against /platformapi controllers to create platform...

CVE-2026-120445

The madong-admin-saas application (versions through 5.1.4 ) contains an incorrect authorization vulnerability within the AccessTokenMiddleware component. In multi-tenant mode, authenticated tenant users can reuse a tenant login JWT against /platformapi controllers to bypass intended restrictions....