https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2026-2141.htmlhttps://patchthecve.com/cve/CVE-2026-2141.htmlTue, 14 Jul 2026 15:02:10 +0000MEDIUM 6.3: A security flaw has been discovered in WuKongOpenSource WukongCRM up to 11.3.3. This affects an unknown part of the file gateway/src/main/java/com/kakarote/gateway/service/impl/PermissionServiceImpl.java of the component URL Handler. Performing a manipulation results in improper authorization. Remothttps://patchthecve.com/cve/CVE-2025-60828.htmlhttps://patchthecve.com/cve/CVE-2025-60828.htmlTue, 14 Jul 2026 15:06:01 +0000MEDIUM 6.5: WukongCRM-9.0-JAVA was discovered to contain a fastjson deserialization vulnerability via the /OaExamine/setOaExamine interface.https://patchthecve.com/cve/CVE-2025-8852.htmlhttps://patchthecve.com/cve/CVE-2025-8852.htmlTue, 14 Jul 2026 15:06:01 +0000MEDIUM 4.3: A vulnerability was identified in WuKongOpenSource WukongCRM 11.0. This affects an unknown part of the file /adminFile/upload of the component API Response Handler. The manipulation leads to information exposure through error message. It is possible to initiate the attack remotely. The exploit has bhttps://patchthecve.com/cve/CVE-2025-5521.htmlhttps://patchthecve.com/cve/CVE-2025-5521.htmlTue, 14 Jul 2026 15:06:01 +0000MEDIUM 4.3: A vulnerability was found in WuKongOpenSource WukongCRM 9.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /system/user/updataPassword. The manipulation leads to cross-site request forgery. The attack can be launched remotely. The exploit