CVE-2026-15721
Query Console SQL Injection Leading to Sensitive Data Disclosure in Bilin Software's HUMANIST Digital Human Resources
- State
- Published
- Severity
- 9.8 Critical
- Published
- Aug 4, 2026
- Updated
- Aug 4, 2026
- Reserved
- Jul 14, 2026
Description
Cleartext storage of sensitive information vulnerability in Bilin Software and Informatics Consultancy Inc. HUMANIST Digital Human Resources allows SQL Injection.
This issue affects HUMANIST Digital Human Resources: from 26.0 before 26.1.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 9.8 Critical | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H | TR-CERT |
Weaknesses
- CWE-312 Cleartext storage of sensitive information
Affected Products
| Product | Versions |
|---|---|
HUMANIST Digital Human ResourcesBilin Software and Informatics Consultancy Inc. |
|
References
- https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0737government-resource
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.