CVE-2026-14465
Session Fixation in Bilin Software's HUMANIST Digital Human Resources
- State
- Published
- Severity
- 6.5 Medium
- Published
- Aug 4, 2026
- Updated
- Aug 4, 2026
- Reserved
- Jul 2, 2026
Description
Insufficient session expiration vulnerability in Bilin Software and Informatics Consultancy Inc. HUMANIST Digital Human Resources allows Reusing Session IDs (aka Session Replay).
This issue affects HUMANIST Digital Human Resources: from 26.0 before 26.1.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 6.5 Medium | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N | TR-CERT |
Weaknesses
- CWE-613 Insufficient session expiration
Affected Products
| Product | Versions |
|---|---|
HUMANIST Digital Human ResourcesBilin Software and Informatics Consultancy Inc. |
|
References
- https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0737government-resource
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.