CVE-2026-6834

The a+HRD developed by aEnrich has a Missing Authorization vulnerability, allowing authenticated remote attackers to arbitrarily read database contents through a specific API method.

More information : https://www.twcert.org.tw/en/cp-139-10834-eb3ee-2.html