Skip to content
OpenAdvisories

Vendor

madong-code

2 known vulnerabilities.

Products

madong-admin-saas 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2026-120445

    madong-admin-saas through 5.1.4 Incorrect Authorization via /platformapi AccessTokenMiddleware

    madong-admin-saas through 5.1.4 contains an incorrect authorization vulnerability in AccessTokenMiddleware that allows authenticated tenant users to access the platform management API in multi-tenant mode. Attackers can reuse a tenant login JWT against /platf…

    madong-code madong-admin-saas