CVE-2026-13547

HighCVSS 7.3/10Last modified Oct 25, 2026

Description

A vulnerability was determined in Hanwang e-Face General Management Platform 6.3.5.4. This issue affects some unknown processing of the file /manage/resourceUpload/upload.do. Executing a manipulation of the argument File can lead to unrestricted upload. The attack may be launched remotely. The exploit has been publicly disclosed and may be utilized.

Metrics

CVSS 3.1 7.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Weakness enumeration

CWE-284CWE-434

Affected software

VendorProductVersions
Hanwange-Face General Management Platform6.3.5.4

References

Timeline

Published
Jun 29, 2026
Last modified
Oct 25, 2026
NVD status
Deferred

Related CVEs from 2026

CVE-2026-135486.3A vulnerability was identified in itsourcecode Hospital Management System 1.0. Impacted is an unknown function of the file /doctortimings.phCVE-2026-135495.4A security flaw has been discovered in CodeAstro Complaint Management System 1.0. The affected element is the function deletereport of the fCVE-2026-13556.5A Missing Authorization vulnerability was identified in GitHub Enterprise Server that allowed an attacker to upload unauthorized content to CVE-2026-135507.3A weakness has been identified in itsourcecode Baptism Information Management System 1.0. The impacted element is an unknown function of theCVE-2026-135517.3A security vulnerability has been detected in itsourcecode Baptism Information Management System 1.0. This affects an unknown function of thCVE-2026-135527.3A vulnerability was detected in itsourcecode Online Hotel Management System 1.0. This impacts an unknown function of the file /admin/mod_ameCVE-2026-135537.3A flaw has been found in itsourcecode Online Hotel Management System 1.0. Affected is an unknown function of the file /admin/mod_amenities/cCVE-2026-135544.3A vulnerability has been found in itsourcecode Online Hotel Management System 1.0. Affected by this vulnerability is an unknown functionalitCVE-2026-135557.3A vulnerability was found in itsourcecode Online Hotel Management System 1.0. Affected by this issue is some unknown functionality of the fiCVE-2026-135564.3A vulnerability was determined in itsourcecode Online Hotel Management System 1.0. This affects an unknown part of the file /admin/mod_usersCVE-2026-135574.3A vulnerability was identified in itsourcecode Online Hotel Management System 1.0. This vulnerability affects unknown code of the file /admiCVE-2026-135583.5A security flaw has been discovered in CodeAstro Complaint Management System 1.0. This issue affects some unknown processing of the file /re
CVE-2026-13547: High severity, CVSS 7.3 | Vulnix