Critical · 9.8 CVE-2026-14175 EUVD-2026-52648GHSA-75vh-8xgg-597q

Unrestricted File Upload in Bilin Software's HUMANIST Digital Human Resources

Published Aug 4, 2026 · Updated Aug 4, 2026 · Assigned by TR-CERT

Vendor: Bilin Software and Informatics Consultancy Product: HUMANIST Digital Human Resources

Description

Unrestricted upload of file with dangerous type vulnerability in Bilin Software and Informatics Consultancy Inc. HUMANIST Digital Human Resources allows Upload a Web Shell to a Web Server.

This issue affects HUMANIST Digital Human Resources: from 26.0 before 26.1.

Affected products

Vendor	Product	Affected	Fixed
Bilin Software and Informatics Consultancy	HUMANIST Digital Human Resources	26.0 – < 26.1	26.1

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0737 government-resource