CVE-2026-108707 is a critical authentication bypass vulnerability in Wukong HRM, allowing unauthenticated attackers to access HRM API endpoints, read sensitive employee data, and modify HR records. Defenders should assess exposure by verifying HRM system configurations and access controls, prioritize remediation of the authentication bypass vulnerability, and monitor HRM system logs for suspicious activit [truncated]
CVE-2026-2141 is an improper authorization vulnerability in WukongCRM. The vulnerability affects an unknown part of the file gateway/src/main/java/com/kakarote/gateway/service/impl/PermissionServiceImpl.java of the component URL Handler. Performing a manipulation results in improper authorization. Remote exploitation of the attack is possible. The exploit has been released to the public and may be used fo [truncated]
