AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2026-14465

MEDIUM · CVSS 6.5 EPSS 0.27%

Source: NVD + CISA KEV + EPSS · Published 2026-08-04 · Last synced 2026-08-04

CyberRota Analysis

AI-Generated

The HUMANIST Digital Human Resources platform from Bilin Software and Informatics Consultancy Inc. is vulnerable due to insufficient session expiration, allowing attackers to reuse session IDs and potentially gain unauthorized access to user accounts. This medium-severity vulnerability could lead to session replay attacks, compromising sensitive user data and functionalities. Organizations using versions 26.0 prior to 26.1 should prioritize patching this issue to mitigate risks associated with session hijacking.

CVE
CVE-2026-14465
Severity
MEDIUM
CVSS
6.5
EPSS
0.27%

Original NVD Description

Insufficient session expiration vulnerability in Bilin Software and Informatics Consultancy Inc. HUMANIST Digital Human Resources allows Reusing Session IDs (aka Session Replay). This issue affects HUMANIST Digital Human Resources: from 26.0 before 26.1.