PatchSiren

WuKongOpenSource CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

LOW WuKongOpenSource CVE published 2026-02-08

CVE-2026-2141

CVE-2026-2141 is an improper authorization vulnerability in WukongCRM. The vulnerability affects an unknown part of the file gateway/src/main/java/com/kakarote/gateway/service/impl/PermissionServiceImpl.java of the component URL Handler. Performing a manipulation results in improper authorization. Remote exploitation of the attack is possible. The exploit has been released to the public and may be used fo [truncated]