CVE-2026-6833: aEnrich｜a+HRD - SQL Injection
Published Apr 22, 2026
·Updated
The a+HRD developed by aEnrich has a SQL Injection vulnerability, allowing authenticated remote attackers to inject arbitrary SQL commands to read database contents.
Affected Software
1 affected component
aEnrich a+HRD
Event History
Apr 22, 2026
CVE Published
via MITRE·03:32 AM
Data Sourced
via MITRE·03:32 AM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·04:16 AM
DescriptionSeverityWeakness
Jan 26, 58293
Event
via FIRST·06:22 PM
Frequently Asked Questions
1
What is the severity of CVE-2026-6833?
CVE-2026-6833 has been classified as a high severity vulnerability due to its potential for exploitation through SQL Injection.
2
How do I fix CVE-2026-6833?
To fix CVE-2026-6833, ensure that input validation and parameterized queries are implemented to prevent SQL Injection.
3
Who is affected by CVE-2026-6833?
CVE-2026-6833 affects users of the a+HRD software developed by aEnrich who have authentication access.
4
What kind of attack does CVE-2026-6833 enable?
CVE-2026-6833 enables authenticated remote attackers to execute arbitrary SQL commands in the a+HRD application.
5
What are the potential impacts of CVE-2026-6833?
The potential impacts of CVE-2026-6833 include unauthorized access to sensitive database information and data manipulation.