Madong-code vulnerabilities
We track 2 vulnerabilities in Madong-code products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on November 2, 2026.
2vulnerabilities
1critical
1high
0exploited
9.1average CVSS score
Latest Madong-code vulnerabilities
- 9.4 Critical severity
madong-admin-saas: Missing Authentication for Critical Functionality
madong-admin-saas through 5.1.4 contains a missing authentication vulnerability in the platform tenant management API because the 'platformapi' middleware key never matches the 'platform' application. Unauthenticated remote attackers can call /platformapi/tena
- 8.8 High severity
madong-admin-saas: Incorrect Authorization
madong-admin-saas through 5.1.4 contains an incorrect authorization vulnerability in AccessTokenMiddleware that allows authenticated tenant users to access the platform management API in multi-tenant mode. Attackers can reuse a tenant login JWT against /platfo