Session Replay Vulnerability in HUMANIST Digital Human Resources by Bilin Software
CVE-2026-14465

6.5MEDIUM

Key Information:

Vendor: Bilin Software And Informatics Consultancy Inc.
Status: Humanist Digital Human Resources
Vendor: CVE Published:; 4 August 2026

🔔 Create Bilin Software And Informatics Consultancy Inc. Vulnerability Alert

What is CVE-2026-14465?

A vulnerability in HUMANIST Digital Human Resources allows attackers to reuse valid session IDs due to insufficient session expiration. This flaw facilitates session replay attacks, potentially compromising user accounts and sensitive data. It is crucial for users of the software versions 26.0 and before 26.1 to implement security measures and updates to mitigate risks associated with session hijacking.

Affected Version(s)

HUMANIST Digital Human Resources 26.0 < 26.1

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/...

government-resource

CVSS V3.1

Score:

6.5

Severity:

MEDIUM

Confidentiality:

High

Integrity:

None

Availability:

High

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

Required

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Aug 4, 2026
Vulnerability Reserved
Jul 2, 2026

Credit

Umut Can Bozkurt

Osman Can Vural

CVE-2026-14465 Data

JSON