attendo_formerly_petpooja_payroll vulnerabilities

CVEs whose affected-version data names the attendo_formerly_petpooja_payroll package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-119736High· 8.2PoC

4d ago

Attendo Admin Android 3.0.13 Hard-coded MQTT Broker Credentials

Attendo (formerly Petpooja Payroll) Admin Android application version 3.0.13 and earlier contains a hard-coded credentials vulnerability that allows attackers to extract production MQTT broker credentials by decompiling the APK's bundled…

▾ MidnightPetpooja · Attendo (formerly Petpooja Payroll)EPSS 0.29%via CVEORG