VYPR
← All advisories
Unrated severityNVD Advisory· Published Mar 19, 2026· Updated Mar 19, 2026

OPEXUS eComplaint unauthenticated file upload

CVE-2026-32867

Description

OPEXUS eComplaint before version 10.1.0.0 allows an unauthenticated attacker to obtain or guess an existing case number and upload arbitrary files via 'Portal/EEOC/DocumentUploadPub.aspx'. Users would see these unexpected files in cases. Uploading a large number of files could consume storage.

Affected products

2
  • Opexus/eComplaintllm-fuzzy2 versions
    <10.1.0.0+ 1 more
    • (no CPE)range: <10.1.0.0
    • (no CPE)range: 0

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.