lenve vhr

• CVE-2026-110217 Medium 6.5 vhr through commit 03abbd3 Information Disclosure of Operator Password Hashes via GET /chat/hrs 0.6%
• CVE-2026-90501 Medium 6.3 lenve vhr HrMapper.xml HrInfoController.updateHr privileges management 0.3%
• CVE-2026-90500 Medium 6.3 lenve vhr Avatar Upload userface FastDFSUtils.upload unrestricted upload 0.3%
• CVE-2026-90499 Medium 5.4 lenve vhr Password Update pass HrInfoController.updatePass improper authorization 0.4%
• CVE-2026-90498 High 7.3 lenve vhr vhr.sql default credentials 0.5%
• CVE-2026-90490 Medium 6.3 lenve vhr MailReceiver deserialization 0.4%
• CVE-2026-85214 High 8.1 vhr Missing Authorization in PUT /hr/info Allows Arbitrary Profile Overwrite 0.5%
• CVE-2026-85182 High 7.5 vhr Missing Authorization in PUT /hr/pass Allows Cross-Account Password Change 0.4%