SQL Injection Vulnerability in HUMANIST Digital Human Resources by Bilin Software
CVE-2026-15721

9.8CRITICAL

Key Information:

Vendor

Bilin Software And Informatics Consultancy Inc.

Status
Humanist Digital Human Resources
Vendor
CVE Published:
4 August 2026

What is CVE-2026-15721?

A vulnerability in HUMANIST Digital Human Resources from Bilin Software and Informatics Consultancy Inc. allows attackers to execute SQL Injection, enabling unauthorized access to sensitive information due to cleartext storage. This impacts version 26.0 prior to 26.1, posing significant risks to data integrity and security.

Affected Version(s)

HUMANIST Digital Human Resources 26.0 < 26.1

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/...
government-resource

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Umut Can Bozkurt
Osman Can Vural
.