CVE-2026-14465

Summary

Insufficient session expiration vulnerability in Bilin Software and Informatics Consultancy Inc. HUMANIST Digital Human Resources allows Reusing Session IDs (aka Session Replay).

This issue affects HUMANIST Digital Human Resources: from 26.0 before 26.1.

Affected Software

VendorProductVersion RangeStatus
Bilin Software and Informatics Consultancy Inc.HUMANIST Digital Human Resources26.0 < 26.1affected

Weaknesses

  • CWE-613: CWE-613 Insufficient session expiration

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References