https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-04T18:16:46.889258+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-120446 CVE-2026-120446 — madong-admin-saas through 5.1.4 Missing Authentication via Platform Tenant Management API 2026-11-04T18:16:46.890288+00:00

Affected: madong-code madong-admin-saas

madong-admin-saas through 5.1.4 contains a missing authentication vulnerability in the platform tenant management API because the 'platformapi' middleware key never matches the 'platform' application. Unauthenticated remote attackers can call /platformapi/tenant/account, bind-plan and sync-data endpoints to list, create, modify, disable or delete tenants and bind subscription plans.