2 matches found
CVE-2026-110207 Wukong AICRM through 20260610 Missing Authorization in User and Role Management APIs
Wukong AICRM through 20260610 contains a missing authorization vulnerability that allows any authenticated user to call user, role, department and agent administration APIs because no administrator check exists. Attackers can send POST requests to /managerUser/updateUser to reset the admin...
CVE-2026-110207 Wukong AICRM through 20260610 Missing Authorization in User and Role Management APIs
Wukong AICRM through 20260610 contains a missing authorization vulnerability that allows any authenticated user to call user, role, department and agent administration APIs because no administrator check exists. Attackers can send POST requests to /managerUser/updateUser to reset the admin...