WU
Vendor
WuKongOpenSource
5
CVEs
0
On KEV
5
New 30D
Products
WU9.8
Wukong_HRM
WuKongOpenSource
2 CVEs0 on KEV2 new
WA8.8
Wukong AICRM
WuKongOpenSource
3 CVEs0 on KEV3 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-110208 | WA Wukong AICRM WuKongOpenSource | 7.1 | Oct 13 | Wukong AICRM through 20260610 Missing Authorization in System Configuration APIs Exposes Stored AI Provider Keys |
| CVE-2026-110207 | WA Wukong AICRM WuKongOpenSource | 8.8 | Oct 13 | Wukong AICRM through 20260610 Missing Authorization in User and Role Management APIs |
| CVE-2026-108708 | WU Wukong_HRM WuKongOpenSource | 8.8 | Oct 11 | Wukong_HRM through commit 186115e Missing Authorization via EmployeeAspect and EmployeeUtil |
| CVE-2026-108707 | WU Wukong_HRM WuKongOpenSource | 9.8 | Oct 11 | Wukong_HRM through commit 186115e Authentication Bypass via ParamAspect |
| CVE-2026-108689 | WA Wukong AICRM WuKongOpenSource | 5.4 | Oct 11 | Wukong AICRM through 20260610 Authorization Bypass via User-Controlled Session ID in POST /chat/send |