CVE-2026-6835
MEDIUM
NVD
CVSS Score
6.1
Severity
MEDIUM
Published
Apr 22, 2026
Vendor
unknown
Description
The a+HCM developed by aEnrich has an Arbitrary File Upload vulnerability, allowing unauthenticated remote attackers to upload arbitrary files to any path, including HTML documents, which may result in a XSS-like effect.