WWuKongOpenSource

Products

Exploited and recent CVEs

• CVE-2026-110208 High 7.1 Wukong AICRM through 20260610 Missing Authorization in System Configuration APIs Exposes Stored AI Provider Keys 0.4%
• CVE-2026-110207 High 8.8 Wukong AICRM through 20260610 Missing Authorization in User and Role Management APIs 0.4%
• CVE-2026-108708 High 8.8 Wukong_HRM through commit 186115e Missing Authorization via EmployeeAspect and EmployeeUtil 0.3%
• CVE-2026-108707 Critical 9.8 Wukong_HRM through commit 186115e Authentication Bypass via ParamAspect 0.6%
• CVE-2026-108689 Medium 5.4 Wukong AICRM through 20260610 Authorization Bypass via User-Controlled Session ID in POST /chat/send 0.2%
• CVE-2026-2141 Medium 6.3 WuKongOpenSource WukongCRM URL PermissionServiceImpl.java improper authorization 0.4%
• CVE-2025-8852 Medium 4.3 WuKongOpenSource WukongCRM API Response upload information exposure 0.4%
• CVE-2025-6106 Medium 4.3 WuKongOpenSource WukongCRM AdminRoleController.java cross-site request forgery 0.3%
• CVE-2025-5879 Low 3.5 WuKongOpenSource WukongCRM File Upload AdminSysConfigController.java cross site scripting 0.3%
• CVE-2025-5521 Medium 4.3 WuKongOpenSource WukongCRM updataPassword cross-site request forgery 0.3%
• CVE-2024-6645 Medium 6.3 WuKongOpenSource Wukong_nocode AviatorScript ExpressionUtil.java deserialization 0.5%