/

CVE-2026-120446

Severity:

CRITICAL RISK

(9.4)

CVE-2026-120446

Deferred

Vulnerability type

Category:

CWE:

CWE-306

Impact:

Severity:

CRITICAL RISK

(9.4)

CVSS version:

3.1

Catch this CVE while code is being written

Detect vulnerable code directly in pull requests, so CVEs are fixed before merge.

Sources

SourceLink
github.comgithub.com/madong-code/madong-admin-saas/blob/v5.1.4/app/platform/controller/tenant/AccountController.php#L26
github.comgithub.com/madong-code/madong-admin-saas/blob/v5.1.4/config/middleware.php
github.comgithub.com/madong-code/madong-admin-saas/commit/2a199a1523ed749c94b876bc2ae5fedf252b2e39
github.comgithub.com/madong-code/madong-admin-saas/issues/2
vulncheck.comvulncheck.com/advisories/madong-admin-saas-through-5.1.4-missing-authentication-via-platform-tenant-management-api
Find out what's already
exploitable in your codebase.