PT-2026-53229 · Hanwang · E-Face General Management Platform

Bigbrother_Man · Published 2026-06-29 · Updated 2026-06-29 · CVE-2026-13547

NVD

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

A vulnerability was determined in Hanwang e-Face General Management Platform 6.3.5.4. This issue affects some unknown processing of the file /manage/resourceUpload/upload.do. Executing a manipulation of the argument File can lead to unrestricted upload. The attack may be launched remotely. The exploit has been publicly disclosed and may be utilized.

Exploit

Fix

Improper Access Control

Unrestricted File Upload

Weakness Enumeration

CWE-284

CWE-434

Related Identifiers

CVE-2026-13547

Affected Products

E-Face General Management Platform

References · 6

• 🔥 https://ucn9h68n9289.feishu.cn/wiki/SrO0wcxd9i6ByukOizGcIgpBnRd · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-13547 · Security Note
• https://vuldb.com/cve/CVE-2026-13547 · Note
• https://vuldb.com/vuln/374555/cti · Note
• https://vuldb.com/submit/842646 · Note
• https://vuldb.com/vuln/374555 · Note