Section

Vulnerabilities

CVE records from NVD, ZDI advisories and the CISA KEV catalog, with CVSS, EPSS, SSVC and exploitation state.

2 matching records.

1. 33
   CVE NVD 1h ago

   madong-admin-saas through 5.1.4 contains a missing authentication vulnerability in the platform tenant management API because the 'platformapi'…

   madong-admin-saas through 5.1.4 contains a missing authentication vulnerability in the platform tenant management API because the 'platformapi' middleware key never matches the 'platform' application. Unauthenticated remote…

   CVSS 9.4 CVE-2026-120446 Madong-Code
2. 25
   CVE NVD 1h ago

   madong-admin-saas through 5.1.4 contains an incorrect authorization vulnerability in AccessTokenMiddleware that allows authenticated tenant users to…

   madong-admin-saas through 5.1.4 contains an incorrect authorization vulnerability in AccessTokenMiddleware that allows authenticated tenant users to access the platform management API in multi-tenant mode. Attackers can reuse a…

   CVSS 8.8 CVE-2026-120445 Madong-Code

Same filters as JSON: /api/items?category=vuln&window=30d&vendor=Madong-Code&limit=100. RSS for this section: feed.xml.