Unrestricted File Upload Vulnerability in HUMANIST Digital Human Resources by Bilin Software
CVE-2026-14175

9.8CRITICAL

Key Information:

Vendor: Bilin Software And Informatics Consultancy Inc.
Status: Humanist Digital Human Resources
Vendor: CVE Published:; 4 August 2026

🔔 Create Bilin Software And Informatics Consultancy Inc. Vulnerability Alert

What is CVE-2026-14175?

The HUMANIST Digital Human Resources software by Bilin Software is susceptible to a vulnerability that allows unrestricted file uploads. This flaw enables an attacker to upload a web shell to the server, potentially compromising the entire application and its underlying infrastructure. The issue affects version 26.0 up to, but not including, version 26.1.

Affected Version(s)

HUMANIST Digital Human Resources 26.0 < 26.1

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/...

government-resource

CVSS V3.1

Score:

9.8

Severity:

CRITICAL

Confidentiality:

High

Integrity:

High

Availability:

High

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

None

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Aug 4, 2026
Vulnerability Reserved
Jun 30, 2026

Credit

Umut Can Bozkurt

Osman Can Vural

CVE-2026-14175 Data

JSON