CVE-2026-6835

MEDIUM

aEnrich｜a+HCM - Arbitrary File Upload

Title source: cna

Description

The a+HCM developed by aEnrich has an Arbitrary File Upload vulnerability, allowing unauthenticated remote attackers to upload arbitrary files to any path, including HTML documents, which may result in a XSS-like effect.

References (2)

Scores

CVSS v3 6.1
EPSS 0.0003
EPSS Percentile 8.5%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Details

CWE
CWE-434
Status published
Products (1)
aEnrich/a+HCM < 8.1
Published Apr 22, 2026
Tracked Since Apr 22, 2026