CVE-2026-10709

A maliciously crafted FBX file, when parsed through Autodesk FBX SDK, can trigger a stack-based buffer overflow vulnerability in fbxsdk::FbxIO::BinaryReadSectionHeader. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process...

Thermo Fisher Patches Forensic DNA File Tampering Flaw in Its Software

Thermo Fisher patched CVE-2026-17583 in five supported DNA analysis products by adding digital signatures that help laboratories detect modified forensic files...

keyv and cacheable npm Package Hijacked in Supply Chain Attack

Wiz Research is actively investigating an ongoing software supply chain attack affecting multiple keyv/cacheable npm packages...

RHSA-2026:49511 Red Hat Security Advisory: frr security update

Bulletin has no description...

CVE-2026-14175

Unrestricted upload of file with dangerous type vulnerability in Bilin Software and Informatics Consultancy Inc. HUMANIST Digital Human Resources allows Upload a Web Shell to a Web Server. This issue affects HUMANIST Digital Human Resources: from 26.0 before 26.1...

EUVD-2026-52655

Observable response discrepancy vulnerability in Bilin Software and Informatics Consultancy Inc. HUMANIST Digital Human Resources allows Account Footprinting. This issue affects HUMANIST Digital Human Resources: from 26.0 before 26.1...

CVE-2026-14202

Bilin Software’s HUMANIST Digital Human Resources (versions before 26.1) suffers a username enumeration flaw via observable differences in login responses, enabling account footprinting. CVSS 3.1 base score 5.3 (Network, Low attack complexity, No privileges, No user interaction). Exploitation sta...

CVE-2026-14465 Session Fixation in Bilin Software's HUMANIST Digital Human Resources

Insufficient session expiration vulnerability in Bilin Software and Informatics Consultancy Inc. HUMANIST Digital Human Resources allows Reusing Session IDs aka Session Replay. This issue affects HUMANIST Digital Human Resources: from 26.0 before 26.1...

CVE-2026-14465

CVE-2026-14465 : Insufficient session expiration allowing session ID reuse (session fixation) in Bilin Software’s HUMANIST Digital Human Resources. Affects versions from 26.0 up to, but not including, 26.1. Impact: potential for session replay with high confidentiality risk; no impact to integrit...

CVE-2026-14192 Stored XSS in Bilin Software's HUMANIST Digital Human Resources

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Bilin Software and Informatics Consultancy Inc. HUMANIST Digital Human Resources allows Stored XSS. This issue affects HUMANIST Digital Human Resources: from 26.0 before 26.1...

CVE-2026-14838 Session Token Exposure in URL Leading to Account Takeover in Bilin Software's HUMANIST Digital Human Resources

Use of GET request method with sensitive query strings vulnerability in Bilin Software and Informatics Consultancy Inc. HUMANIST Digital Human Resources allows Session Hijacking. This issue affects HUMANIST Digital Human Resources: from 26.0 before 26.1...

CVE-2026-14804

CVE-2026-14804 affects Bilin Software and Informatics Consultancy Inc.’s HUMANIST Digital Human Resources, specifically versions before 26.1. The vulnerability is described as a hardcoded cryptographic key that allows reading sensitive constants inside the executable, exposing high-severity data....

EUVD-2026-52650

URL redirection to untrusted site 'open redirect' vulnerability in Bilin Software and Informatics Consultancy Inc. HUMANIST Digital Human Resources allows Phishing. This issue affects HUMANIST Digital Human Resources: from 26.0 before 26.1...

CVE-2026-14219 URL Redirection in Bilin Software's HUMANIST Digital Human Resources

URL redirection to untrusted site 'open redirect' vulnerability in Bilin Software and Informatics Consultancy Inc. HUMANIST Digital Human Resources allows Phishing. This issue affects HUMANIST Digital Human Resources: from 26.0 before 26.1...

CVE-2026-14219

CVE-2026-14219 describes an open redirect vulnerability in Bilin Software and Informatics Consultancy Inc. HUMANIST Digital Human Resources, affecting versions 26.0 up to (but not including) 26.1. The issue enables redirection to an untrusted site, facilitating phishing attempts. The CVSS v3.1 ba...

EUVD-2026-52649

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Bilin Software and Informatics Consultancy Inc. HUMANIST Digital Human Resources allows Path Traversal. This issue affects HUMANIST Digital Human Resources: from 26.0 before 26.1...

CVE-2026-14194 Path Traversal Allows Arbitrary File Download in Bilin Software's HUMANIST Digital Human Resources

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Bilin Software and Informatics Consultancy Inc. HUMANIST Digital Human Resources allows Path Traversal. This issue affects HUMANIST Digital Human Resources: from 26.0 before 26.1...

CVE-2026-14194

Technical details about CVE-2026-14194 are not publicly available in the provided documents. Monitor for updates from official advisories.

EUVD-2026-52648

Unrestricted upload of file with dangerous type vulnerability in Bilin Software and Informatics Consultancy Inc. HUMANIST Digital Human Resources allows Upload a Web Shell to a Web Server. This issue affects HUMANIST Digital Human Resources: from 26.0 before 26.1...

CVE-2026-14175

CVE-2026-14175 affects Bilin Software’s HUMANIST Digital Human Resources 26.0 all the way up to 26.0.x before 26.1. The issue is an unrestricted file upload vulnerability that can let an attacker upload a dangerous file (a web shell) to the web server, enabling potential remote control of the ser...