Petpooja
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Munshi | 5 | – | Nov 2, 2026 |
| Attendo (formerly Petpooja Payroll) | 1 | – | Nov 2, 2026 |
Exploited and recent CVEs
- CVE-2026-119736 Attendo Admin Android 3.0.13 Hard-coded MQTT Broker Credentials 0.3%
- CVE-2026-119735 Munshi XSS via Purchase Inquiry Thread Rendering 0.2%
- CVE-2026-119734 Munshi IDOR via Purchase Inquiry Thread Endpoint 0.2%
- CVE-2026-119733 Munshi Missing Authorization in Company Deletion API 0.3%
- CVE-2026-119732 Munshi Broken Object Level Authorization via Invoice Deletion API 0.2%
- CVE-2026-119731 Munshi Payment Bypass via Unauthenticated Webhook Endpoint 0.3%