Hard-coded Key Vulnerability in HUMANIST Digital Human Resources by Bilin Software
CVE-2026-14804

9.1CRITICAL

Key Information:

Vendor

Bilin Software And Informatics Consultancy Inc.

Status
Humanist Digital Human Resources
Vendor
CVE Published:
4 August 2026

What is CVE-2026-14804?

A hard-coded cryptographic key vulnerability in HUMANIST Digital Human Resources by Bilin Software enables unauthorized access to sensitive data within the executable. This security flaw primarily affects versions 26.0 to 26.1, potentially exposing confidential information and raising significant security concerns for users.

Affected Version(s)

HUMANIST Digital Human Resources 26.0 < 26.1

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/...
government-resource

CVSS V3.1

Score:
9.1
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Umut Can Bozkurt
Osman Can Vural
.