Read the docs

madong-code

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

madong-code records in CISA KEV

No madong-code vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2026-83838 CVE-2026-120446 · GHSA-rqh8-vfjg-c7gf

Missing authentication in madong-admin-saas tenant management API

Priority MEDIUM 46

madong-admin-saas through 5.1.4 contains a missing authentication vulnerability in the platform tenant management API because the 'platformapi' middleware key never matches the 'platform' application.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.01045 Published 2026-11-02 No fix listed CWE-306
TI-2026-83837 CVE-2026-120445 · GHSA-rj3r-2pcr-8jf9

Incorrect authorization in madong-admin-saas exposes platform API

Priority MEDIUM 40

madong-admin-saas through 5.1.4 contains an incorrect authorization vulnerability in AccessTokenMiddleware that allows authenticated tenant users to access the platform management API in multi-tenant mode.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00355 Published 2026-11-02 No fix listed CWE-863
Open these records in search →