CVE-2026-40866 — Horilla is a free and open source Human Resource Management System (HRMS). In 1.5.0, an insecure direct object reference in the employee document upload endpoint allows any authenticated user to overw — CVE Database · The Intelligence Room