Advisories · Technology

Bilin Software and Informatics Consultancy Inc. HUMANIST Digital Human Resources.

Every CVE that names Bilin Software and Informatics Consultancy Inc. HUMANIST Digital Human Resources among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-14202 CVE record

CVSS 5.3 Medium

Username Enumeration via Differential Login Responses in Bilin Software's HUMANIST Digital Human Resources
- Bilin Software and Informatics Consultancy Inc. HUMANIST Digital Human Resources
- CWE-204
Not analysed yet 4 Aug 2026
CVE-2026-14465 CVE record

CVSS 6.5 Medium

Session Fixation in Bilin Software's HUMANIST Digital Human Resources
- Bilin Software and Informatics Consultancy Inc. HUMANIST Digital Human Resources
- Authentication bypass
Not analysed yet 4 Aug 2026
CVE-2026-14192 CVE record

CVSS 5.4 Medium

Stored XSS in Bilin Software's HUMANIST Digital Human Resources
- Bilin Software and Informatics Consultancy Inc. HUMANIST Digital Human Resources
- Cross-site scripting (XSS)
Not analysed yet 4 Aug 2026
CVE-2026-14838 CVE record

CVSS 7.4 High

Session Token Exposure in URL Leading to Account Takeover in Bilin Software's HUMANIST Digital Human Resources
- Bilin Software and Informatics Consultancy Inc. HUMANIST Digital Human Resources
- CWE-598
Not analysed yet 4 Aug 2026
CVE-2026-14804 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Hardcoded Cryptographic Key in Bilin Software's HUMANIST Digital Human Resources
- Bilin Software and Informatics Consultancy Inc. HUMANIST Digital Human Resources
- Hard-coded credentials
Not analysed yet 4 Aug 2026
CVE-2026-14219 CVE record

CVSS 5.4 Medium

URL Redirection in Bilin Software's HUMANIST Digital Human Resources
- Bilin Software and Informatics Consultancy Inc. HUMANIST Digital Human Resources
- Open redirect
Not analysed yet 4 Aug 2026
CVE-2026-14194 CVE record

CVSS 6.5 Medium

Path Traversal Allows Arbitrary File Download in Bilin Software's HUMANIST Digital Human Resources
- Bilin Software and Informatics Consultancy Inc. HUMANIST Digital Human Resources
- Path traversal
Not analysed yet 4 Aug 2026
CVE-2026-14175 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Unrestricted File Upload in Bilin Software's HUMANIST Digital Human Resources
- Bilin Software and Informatics Consultancy Inc. HUMANIST Digital Human Resources
- Unrestricted file upload
Not analysed yet 4 Aug 2026
CVE-2026-15721 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Query Console SQL Injection Leading to Sensitive Data Disclosure in Bilin Software's HUMANIST Digital Human Resources
- Bilin Software and Informatics Consultancy Inc. HUMANIST Digital Human Resources
- Information disclosure
Not analysed yet 4 Aug 2026