Petpooja

Products

ProductCVEsExploitedLatest
Munshi5–Nov 2, 2026
Attendo (formerly Petpooja Payroll)1–Nov 2, 2026

Exploited and recent CVEs

  • CVE-2026-119736 High 8.2 Attendo Admin Android 3.0.13 Hard-coded MQTT Broker Credentials 0.3%
  • CVE-2026-119735 Medium 5.4 Munshi XSS via Purchase Inquiry Thread Rendering 0.2%
  • CVE-2026-119734 Medium 6.5 Munshi IDOR via Purchase Inquiry Thread Endpoint 0.2%
  • CVE-2026-119733 High 8.1 Munshi Missing Authorization in Company Deletion API 0.3%
  • CVE-2026-119732 Medium 6.5 Munshi Broken Object Level Authorization via Invoice Deletion API 0.2%
  • CVE-2026-119731 High 7.5 Munshi Payment Bypass via Unauthenticated Webhook Endpoint 0.3%