← Database

CVE-2026-22234

CRITICAL CVSS: 9.8 Published: 2026-01-08 Modified: 2026-06-17

Description

OPEXUS eCasePortal before version 9.0.45.0 allows an unauthenticated attacker to navigate to the 'Attachments.aspx' endpoint, iterate through predictable values of 'formid', and download or delete all user-uploaded files, or upload new files.

Affected Platforms

Opexustech Ecase Portal

Weakness Type

CWE-639

References