CVE-2026-14838

—

CVSS 3.1

7.4 high

EPSS

<1%p11

Published

Aug 4, 2026 (Aug 4, 2026)

Modified

Aug 26, 2026

Description

Use of GET request method with sensitive query strings vulnerability in Bilin Software and Informatics Consultancy Inc. HUMANIST Digital Human Resources allows Session Hijacking. This issue affects HUMANIST Digital Human Resources: from 26.0 before 26.1.

Weakness: CWE-598
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (0.2%)

In the news0 stories

No ingested article mentions this CVE yet.