TI-2025-43147 CVE-2025-70841 · GHSA-3x28-p955-cr3vDokans Multi-Tenancy Based eCommerce Platform SaaS 3.9.2 allows unauthenticated remote…Priority MEDIUM 49Dokans Multi-Tenancy Based eCommerce Platform SaaS 3.9.2 allows unauthenticated remote attackers to obtain sensitive application configuration data via direct request to /script/.env file.CVSS 3.1CRITICAL 10.0· Network · No auth · No interaction · EPSS 0.00422 · Published 2026-02-03 · No fix listed CWE-287