CVE-2026-14838

Published: Aug 4, 2026Modified: Aug 26, 2026Deferred

7.4

Vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

Exploitability: 2.2 / Impact: 5.2

Source: iletisim@usom.gov.tr (Secondary)

Description

Use of GET request method with sensitive query strings vulnerability in Bilin Software and Informatics Consultancy Inc. HUMANIST Digital Human Resources allows Session Hijacking. This issue affects HUMANIST Digital Human Resources: from 26.0 before 26.1.

Related CWEs

CWE-598

Use of GET Request Method With Sensitive Query Strings

The web application uses the HTTP GET method to process a request and includes sensitive information in the query string of that request.

References (1)

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0737

Source: iletisim@usom.gov.tr

Timeline

No history available yet.