Skip to content
OpenAdvisories

Vendor

WuKongOpenSource

11 known vulnerabilities.

Products

WukongCRM 5 Wukong AICRM 3 Wukong_HRM 2 Wukong_nocode 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2026-108707

    Wukong_HRM through commit 186115e Authentication Bypass via ParamAspect

    Wukong_HRM through commit 186115e contains an authentication bypass vulnerability in ParamAspect that allows unauthenticated attackers to call every HRM API endpoint by omitting the AUTH-TOKEN header. Attackers gain HR administrator access to read payslips, s…

    WuKongOpenSource Wukong_HRM