{"uuid": "48726469-0dd3-4997-b4bf-6530c25aa8a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-108707", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mxkz6f7eu62a", "content": "CRITICAL auth bypass in WuKong_HRM (\u2264 commit 186115e): attackers can access all APIs as admin, risking HR data. Restrict endpoints and monitor logs until a fix is confirmed. https://radar.offseq.com/threat/cve-2026-108707-improper-authentication-in-wukongopensource-wukonghrm-13cec42117273b1c #Off...", "creation_timestamp": "2026-10-11T03:00:30.624623Z"}