WuKongOpenSource vulnerabilities
11 published CVEs name WuKongOpenSource among the affected products.
- 11Published CVEs11 of them scored
- 6Last 12 monthspublished in the last year
- 1Critical3 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-110208
Wukong AICRM through 20260610 Missing Authorization in System Configuration APIs Exposes Stored AI Provider Keys
WuKongOpenSource · Wukong AICRM
High7.1 - CVE-2026-110207
Wukong AICRM through 20260610 Missing Authorization in User and Role Management APIs
WuKongOpenSource · Wukong AICRM
High8.7 - CVE-2026-108708
Wukong_HRM through commit 186115e Missing Authorization via EmployeeAspect and EmployeeUtil
WuKongOpenSource · Wukong_HRM
High8.7 - CVE-2026-108707
Wukong_HRM through commit 186115e Authentication Bypass via ParamAspect
WuKongOpenSource · Wukong_HRM
Critical9.3 - CVE-2026-108689
Wukong AICRM through 20260610 Authorization Bypass via User-Controlled Session ID in POST /chat/send
WuKongOpenSource · Wukong AICRM
Medium5.3 - CVE-2026-2141
WuKongOpenSource WukongCRM URL PermissionServiceImpl.java improper authorization
WuKongOpenSource · WukongCRM
Medium5.3 - CVE-2025-8852
WuKongOpenSource WukongCRM API Response upload information exposure
WuKongOpenSource · WukongCRM
Medium5.3 - CVE-2025-6106
WuKongOpenSource WukongCRM AdminRoleController.java cross-site request forgery
WuKongOpenSource · WukongCRM
Medium5.3 - CVE-2025-5879
WuKongOpenSource WukongCRM File Upload AdminSysConfigController.java cross site scripting
WuKongOpenSource · WukongCRM
Medium5.1 - CVE-2025-5521
WuKongOpenSource WukongCRM updataPassword cross-site request forgery
WuKongOpenSource · WukongCRM
Medium5.3