← All reports

The a+HCM and a+HRD products developed by aEnrich have critical security vulnerabilities that allow remote attackers to exploit the systems.

CybersecurityTechnologyConflictApr 22, 2026score 0.172 posts · 0 replies across 1 instances
The thread discusses two vulnerabilities discovered in products developed by aEnrich, specifically a+HCM and a+HRD. These vulnerabilities allow remote attackers to upload arbitrary files and read database contents, posing significant security risks.

Claims

The a+HCM and a+HRD products developed by aEnrich have critical security vulnerabilities that allow remote attackers to exploit the systems.
Parent: CybersecurityEntity: aEnrich productsSub-entity: a+HCM and a+HRDImpact: negativeDate: Apr 22, 2026Target: The security of aEnrich's products

Source posts

@[email protected]
🚨 EUVD-2026-24601 📊 Score: 7.1/10 (CVSS v3.1) 📦 Product: a+HRD 🏢 Vendor: aEnrich 📅 Updated: 2026-04-22 📝 The a+HRD developed by aEnrich has a Missing Authorization vulnerability, allowing authenticated remote attackers to arbitrarily read database contents through a specific API method. 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-24601 #cybersecurity #infosec #euvd #cve #vulnerability
0 boosts · 0 favs · 0 replies · Apr 22, 2026
#cybersecurity#infosec#euvd#cve#vulnerability
@[email protected]
🚨 EUVD-2026-24603 📊 Score: 5.1/10 (CVSS v3.1) 📦 Product: a+HCM 🏢 Vendor: aEnrich 📅 Updated: 2026-04-22 📝 The a+HCM developed by aEnrich has an Arbitrary File Upload vulnerability, allowing unauthenticated remote attackers to upload arbitrary files to any path, including HTML documents, which may result in a XSS-like effect. 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-24603 #cybersecurity #infosec #euvd #cve #vulnerability
0 boosts · 0 favs · 0 replies · Apr 22, 2026
#cybersecurity#infosec#euvd#cve#vulnerability