Post #123904 2 Oct 11, 2026, 09:08 UTC CVE Alert: CVE-2026-108708 - WuKongOpenSource - Wukong_HRM - https://www.redpacketsecurity.com/cve-alert-cve-2026-108708-wukongopensource-wukong-hrm/ RedPacket Security CVE Alert: CVE-2026-108708 - WuKongOpenSource - Wukong_HRM - RedPacket Security Wukong_HRM through commit 186115e contains a missing authorization vulnerability because EmployeeAspect assigns every caller the HR administrator role and