CVE-2026-14838

{"id": "CVE-2026-14838", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-14838", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2026-08-04T13:09:33.652466Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "iletisim@usom.gov.tr", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.4, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.2, "exploitabilityScore": 2.2}]}, "affected": [{"source": "iletisim@usom.gov.tr", "affectedData": [{"vendor": "Bilin Software and Informatics Consultancy Inc.", "product": "HUMANIST Digital Human Resources", "versions": [{"status": "affected", "version": "26.0", "lessThan": "26.1", "versionType": "custom"}], "defaultStatus": "unaffected"}]}], "published": "2026-08-04T10:19:32.540", "references": [{"url": "https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0737", "source": "iletisim@usom.gov.tr"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "iletisim@usom.gov.tr", "description": [{"lang": "en", "value": "CWE-598"}]}], "descriptions": [{"lang": "en", "value": "Use of GET request method with sensitive query strings vulnerability in Bilin Software and Informatics Consultancy Inc. HUMANIST Digital Human Resources allows Session Hijacking.\n\nThis issue affects HUMANIST Digital Human Resources: from 26.0 before 26.1."}, {"lang": "es", "value": "Vulnerabilidad por el uso del m\u00e9todo de solicitud GET con cadenas de consulta sensibles en Bilin Software and Informatics Consultancy Inc. HUMANIST Digital Human Resources permite el secuestro de sesi\u00f3n.\n\nEste problema afecta a HUMANIST Digital Human Resources: desde la versi\u00f3n 26.0 hasta versiones anteriores a la 26.1."}], "lastModified": "2026-10-23T23:10:00.157", "sourceIdentifier": "iletisim@usom.gov.tr"}