CVE ID :CVE-2026-108707 Published : Oct. 11, 2026, 2:16 a.m. | 1 hour, 13 minutes ago Description :Wukong_HRM through commit 186115e contains an authentication bypass vulnerability in ParamAspect that allows unauthenticated attackers to call every HRM API endpoint by omitting the AUTH-TOKEN...

#Sicherheitslücke

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-108707 - Wukong_HRM through commit 186115e Authentication Bypass via ParamAspect

VERWANDTEARTIKEL

Ransomware Actors Exploiting Palo Alto GlobalProtect Flaw for Stealthy VPN Access

CVE-2026-9103

CVE-2026-8481

CVE-2026-108708 - Wukong_HRM through commit 186115e Missing Authorization via EmployeeAspect and EmployeeUtil

CVE-2026-105134

CVE-2026-108657 - JeecgBoot through 3.9.5 Missing Authorization via /sys/tenant/passApply