Session Hijacking Vulnerability in HUMANIST Digital Human Resources by Bilin Software and Informatics Consultancy Inc.

CVE-2026-14838

What is CVE-2026-14838?

A vulnerability has been identified in HUMANIST Digital Human Resources by Bilin Software and Informatics Consultancy Inc. This flaw arises from the improper handling of sensitive query strings in GET request methods. An attacker may exploit this weakness to hijack user sessions, potentially granting unauthorized access to sensitive information and functionalities. Affected versions include HUMANIST Digital Human Resources from 26.0 up to, but not including, 26.1. It is crucial for users and administrators to apply recommended security patches and review security practices to mitigate risks associated with this vulnerability.

References