CVE-2026-14465

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2026-14465
Insufficient session expiration vulnerability in Bilin Software and Informatics Consultancy Inc. HUMANIST Digital Human Resources allows Reusing Session IDs (aka Session Replay). This issue affects HUMANIST Digital Human Resources: from 26.0 before 26.1.

6.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References
Link Resource
https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0737
Configurations

No configuration.

History

23 Oct 2026, 23:10

Type Values Removed Values Added
Summary
  • (es) Vulnerabilidad de expiración de sesión insuficiente en Bilin Software and Informatics Consultancy Inc. HUMANIST Digital Human Resources permite la Reutilización de IDs de Sesión (también conocido como Replay de Sesión). Este problema afecta a HUMANIST Digital Human Resources: desde la versión 26.0 hasta antes de la 26.1.
Information

Published : 2026-08-04 10:19

Updated : 2026-10-23 23:10

NVD link : CVE-2026-14465

Mitre link : CVE-2026-14465

CVE.ORG link : CVE-2026-14465

JSON object : View

Products Affected

No product.

CWE
CWE-613

Insufficient Session Expiration