CVE-2026-110099

The Jorani application (versions before 1.0.4 ) is susceptible to a missing authorization vulnerability within the Hr controller . Specifically, the exportLeaves, exportOvertime, and exportEmployees actions do not properly restrict access, allowing any authenticated user to export sensitive HR da...

CVE-2026-108708

The Wukong_HRM software (through commit 186115e) is vulnerable to a missing authorization flaw (CWE-862). The root cause lies in EmployeeAspect incorrectly assigning the HR administrator role to every caller, combined with EmployeeUtil data-scope checks that return all employees. Consequently, an...