Skip to content
EXPLOIT
.CC
CVEs
Search
About
synced 10 MIN AGO
T-10M
01
Record
STATE: —
02
Description
SRC: CNA
03
Metadata
SCHEMA: CVE JSON 5
04
Affected products
PAIRS: —
05
References
REFS: —
01
Record
STATE: PUBLISHED
CVE-2026-72741
Rainbond 6.9.7 Region API Cross-Enterprise IDOR via Tenant Access
High
PUBLISHED
CNA: VulnCheck
Base score
8.6
CVSS v4.0
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
View raw JSON
CVE Program record
02
Description
CNA: VulnCheck
Rainbond 6.9.7 Region API Cross-Enterprise IDOR via Tenant Access
03
Metadata
SCHEMA: 5.2
Published
2026-08-13 17:59Z
1 DAY AGO
Last updated
2026-08-14 12:46Z
5 HR AGO
Reserved
2026-08-10
Assigning CNA
VulnCheck
Record state
PUBLISHED
Severity
High (CVSS 8.6)
CVSS vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
Weaknesses
CWE-639
SSVC decision
No CISA-ADP assessment
Data version
5.2
Document digest
7eacfeb17cd25dc924d8d4e4b8bd6365f0a84f4e9924cae5dbf3cb2fbfff03de
04
Affected products
PAIRS: 1
Vendor
Product
Versions
Platforms
goodrain
rainbond
0 to 6.9.7
—
05
References
REFS: 2
github.com
Researcher Disclosure
https://github.com/goodrain/rainbond/issues/2665
technical-description
exploit
issue-tracking
www.vulncheck.com
https://www.vulncheck.com/advisories/rainbond-region-api-cross-enterprise-idor-via-tenant-access
third-party-advisory