Skip to content
CVE PROGRAM SOURCE RECORD7.4 High

CVE-2026-14838

Session Token Exposure in URL Leading to Account Takeover in Bilin Software's HUMANIST Digital Human Resources

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
TR-CERT

Description

Use of GET request method with sensitive query strings vulnerability in Bilin Software and Informatics Consultancy Inc. HUMANIST Digital Human Resources allows Session Hijacking. This issue affects HUMANIST Digital Human Resources: from 26.0 before 26.1.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Bilin Software and Informatics Consultancy Inc. HUMANIST Digital Human Resources

Default version status: unaffected

  • 26.0 to < 26.1affected

References