Skip to content
OpenAdvisories
Medium · 6.5 CVE-2026-14465 EUVD-2026-52654GHSA-fhhf-pqcg-p3jc

Session Fixation in Bilin Software's HUMANIST Digital Human Resources

Published Aug 4, 2026 · Updated Aug 4, 2026 · Assigned by TR-CERT

Description

Insufficient session expiration vulnerability in Bilin Software and Informatics Consultancy Inc. HUMANIST Digital Human Resources allows Reusing Session IDs (aka Session Replay).

This issue affects HUMANIST Digital Human Resources: from 26.0 before 26.1.

Affected products

VendorProductAffectedFixed
Bilin Software and Informatics Consultancy HUMANIST Digital Human Resources 26.0 – < 26.1 26.1

References