https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 04 Nov 2026 18:16:45 +0000 https://db.gcve.eu/vuln/cve-2026-120446 <p><strong>Affected:</strong> madong-code madong-admin-saas</p> <p>madong-admin-saas through 5.1.4 contains a missing authentication vulnerability in the platform tenant management API because the &#39;platformapi&#39; middleware key never matches the &#39;platform&#39; application. Unauthenticated remote attackers can call /platformapi/tenant/account, bind-plan and sync-data endpoints to list, create, modify, disable or delete tenants and bind subscription plans.</p> <p><strong>Affected:</strong> madong-code madong-admin-saas</p> <p>madong-admin-saas through 5.1.4 contains a missing authentication vulnerability in the platform tenant management API because the &#39;platformapi&#39; middleware key never matches the &#39;platform&#39; application. Unauthenticated remote attackers can call /platformapi/tenant/account, bind-plan and sync-data endpoints to list, create, modify, disable or delete tenants and bind subscription plans.</p> https://db.gcve.eu/vuln/cve-2026-120446