CVE-2026-120446

madong-admin-saas through 5.1.4 contains a missing authentication vulnerability in the platform tenant management API because the 'platformapi' middleware key never matches the 'platform' application. Unauthenticated remote attackers can call /platformapi/tenant/account, bind-plan and sync-data...

CVE-2026-120446

The madong-admin-saas software (versions through 5.1.4 ) is vulnerable to a missing authentication flaw within the platform tenant management API . This occurs because the 'platformapi' middleware key fails to match the 'platform' application. An unauthenticated remote attacker can exploit this b...