CyberSecBulletin

Goodrain vulnerabilities

We track 1 vulnerability in Goodrain products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on August 13, 2026.

1vulnerabilities
0critical
1high
0exploited
8.1average CVSS score

Latest Goodrain vulnerabilities

  • 8.1 High severity

    rainbond: Authorization Bypass Through User-Controlled Key

    CVE-2026-72741Goodrain

    Rainbond through 6.9.7 contains a broken access control vulnerability in the CheckToken function that allows authenticated attackers to access unauthorized enterprise resources by substituting another enterprise's tenant name in URL paths. Attackers can use an