TI-2026-50976 CVE-2026-72741 · GHSA-5xhp-2v8r-m7wh
Rainbond 6.9.7 Region API Cross-Enterprise IDOR via Tenant Access
Priority HIGH 72
Rainbond through 6.9.7 contains a broken access control vulnerability in the CheckToken function that allows authenticated attackers to access unauthorized enterprise resources by substituting another enterprise's tenant…