CVE-2026-110207 in Wukong AICRM
Resumen
por MITRE • 2026-10-13
Wukong AICRM through 20260610 contains a missing authorization vulnerability that allows any authenticated user to call user, role, department and agent administration APIs because no administrator check exists. Attackers can send POST requests to /managerUser/updateUser to reset the admin account's password and assign themselves the "all" role, achieving full administrator account takeover.
If you want to get best quality of vulnerability data, you may have to visit VulDB.