Vendor

Madong

1 brief RSS

madong-admin-saas: Missing authentication in tenant management API (CVE-2026-120446)

A missing authentication vulnerability in madong-admin-saas version 5.1.4 and earlier allows unauthenticated remote attackers to perform full CRUD operations on tenant management and subscription API endpoints.

madong-admin-saas authentication-bypass api-security cve-2026-120446 privilege-escalation access-control

1r 1t 2c 18h ago