CVE-2026-6833 HIGH

CVE-2026-6833: aEnrich｜a+HRD - SQL Injection

Vendor Aenrich

Product a+HRD

Weakness CWE-89 · SQLi

Published April 22, 2026

Last update April 22, 2026

View on NVD All CVEs

CVSS base score

7.1/10

Attack vector Network

Attack complexity Low

Privileges required Low

User interaction None

Confidentiality —

Integrity —

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

What the vulnerability does

01Description

The a+HRD developed by aEnrich has a SQL Injection vulnerability, allowing authenticated remote attackers to inject arbitrary SQL commands to read database contents.

Key dates

02Disclosure timeline

April 22, 2026 CVE published

April 22, 2026 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2026-6833 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/89.html

Related vulnerabilities

04Related CVE

CVE-2021-24575 WPSchoolPress < 2.1.10 - Multiple Authenticated SQL Injections CVE-2026-5660 itsourcecode Construction Management System Parameter borrowed_equip.php sql injection CVE-2026-46364 phpMyFAQ - SQL Injection via User-Agent Header in BuiltinCaptcha CVE-2025-5670 PHPGurukul Medical Card Generation System manage-card.php sql injection CVE-2026-2132 code-projects Online Music Site AdminUpdateCategory.php sql injection