CVE ID :CVE-2026-108708 Published : Oct. 11, 2026, 2:16 a.m. | 1 hour, 13 minutes ago Description :Wukong_HRM through commit 186115e contains a missing authorization vulnerability because EmployeeAspect assigns every caller the HR administrator role and EmployeeUtil data-scope checks return...

#Sicherheitslücke

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-108708 - Wukong_HRM through commit 186115e Missing Authorization via EmployeeAspect and EmployeeUtil

VERWANDTEARTIKEL

Ransomware Actors Exploiting Palo Alto GlobalProtect Flaw for Stealthy VPN Access

CVE-2026-9103

CVE-2026-8481

CVE-2026-108707 - Wukong_HRM through commit 186115e Authentication Bypass via ParamAspect

CVE-2026-105134

CVE-2026-108657 - JeecgBoot through 3.9.5 Missing Authorization via /sys/tenant/passApply