Wukongopensource - Wukong Hrm - CRITICAL - CVE-2026-108707. Wukong HRM is susceptible to an authentication bypass vulnerability in its ParamAspect component, allowing unauthenticated malicious actors to access all HRM API endpoints by omitting the required AUTH-TOKEN header. This flaw can lead to unauthorized access to sensitive HR data, including employee payslips, salary histories, and personal information. Attackers can exploit this vulnerability to manipulate, download, or delete critical company-wide HR records, significantly impacting organizational confidentiality and integrity. BADGES: 👾 EXPLOITED | 🟡 PoC | SecurityVulnerability.io