CVE-2026-14192

CVE-2026-14192 describes a Stored XSS in Bilin Software’s HUMANIST Digital Human Resources. Root cause: improper neutralization of input during web page generation. Affected: HUMANIST Digital Human Resources versions 26.0 before 26.1. Impact (per CVSS 3.1): Medium (AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L...

CVE-2026-14838

CVE-2026-14838 affects HUMANIST Digital Human Resources from Bilin Software and Informatics Consultancy Inc. (versions 26.0 up to, but not including, 26.1). The vulnerability arises from using GET requests with sensitive query strings, enabling session exposure and potential account takeover. The...

CVE-2026-14194 Path Traversal Allows Arbitrary File Download in Bilin Software's HUMANIST Digital Human Resources

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Bilin Software and Informatics Consultancy Inc. HUMANIST Digital Human Resources allows Path Traversal. This issue affects HUMANIST Digital Human Resources: from 26.0 before 26.1...

CVE-2026-14175

CVE-2026-14175 affects Bilin Software’s HUMANIST Digital Human Resources 26.0 all the way up to 26.0.x before 26.1. The issue is an unrestricted file upload vulnerability that can let an attacker upload a dangerous file (a web shell) to the web server, enabling potential remote control of the ser...