[ Vendor · 5 CVEs ]
WuKongOpenSource
CVEs affecting WuKongOpenSource published in the last 30 days, plus any WuKongOpenSource CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-110207 | 13 Oct 2026 | CVSS 8.8 | WuKongOpenSource Wukong AICRMWukong AICRM through 20260610 contains a missing authorization vulnerability that allows any authenticated user to call user, role, department and… | |
| CVE-2026-110208 | 13 Oct 2026 | CVSS 7.1 | WuKongOpenSource Wukong AICRMWukong AICRM through 20260610 contains a missing authorization vulnerability in the /systemConfig controller that allows any authenticated user to… | |
| CVE-2026-108707 | 11 Oct 2026 | CVSS 9.8 | WuKongOpenSource Wukong_HRMWukong_HRM through commit 186115e contains an authentication bypass vulnerability in ParamAspect that allows unauthenticated attackers to call every… | |
| CVE-2026-108708 | 11 Oct 2026 | CVSS 8.8 | WuKongOpenSource Wukong_HRMWukong_HRM through commit 186115e contains a missing authorization vulnerability because EmployeeAspect assigns every caller the HR administrator… | |
| CVE-2026-108689 | 11 Oct 2026 | CVSS 5.4 | WuKongOpenSource Wukong AICRMWukong AICRM through 20260610 contains a missing authorization vulnerability that allows authenticated users to write into other users' AI chat… |