Wem-project Wem vulnerabilities

• smewebify weberpmesv2, wem-project wem +1 more WebErpMesv2 has a File Upload Validation Bypass Leading to RCE CVE-2026-22789 5.4 MediumJanuary 12, 2026
• smewebify weberpmesv2, wem-project wem +1 more WebErpMesv2 allows unauthenticated API Access CVE-2026-22788 8.2 HighJanuary 12, 2026