Medium severity5.4NVD Advisory· Published Mar 19, 2026· Updated Jun 17, 2026
CVE-2026-32867
CVE-2026-32867
Description
OPEXUS eComplaint before version 10.1.0.0 allows an unauthenticated attacker to obtain or guess an existing case number and upload arbitrary files via 'Portal/EEOC/DocumentUploadPub.aspx'. Users would see these unexpected files in cases. Uploading a large number of files could consume storage.
Affected products
3<10.1.0.0+ 1 more
- (no CPE)range: <10.1.0.0
- (no CPE)range: 0
Patches
Vulnerability mechanics
References
2- www.cve.org/CVERecordnvdThird Party Advisory
- raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2025/va-26-077-01.jsonnvdBroken Link
News mentions
0No linked articles in our index yet.