CVE-2026-14465

Full vulnerability record from the local CVENow database.

Description

Insufficient session expiration vulnerability in Bilin Software and Informatics Consultancy Inc. HUMANIST Digital Human Resources allows Reusing Session IDs (aka Session Replay). This issue affects HUMANIST Digital Human Resources: from 26.0 before 26.1.

Severity

MEDIUM

CVSS score

6.5 (v3.1)

Vulnerability status

Deferred

Source identifier

[email protected]

Published

2026-08-04 10:19:32.293000

Last modified

2026-10-23 23:10:00.157000

View original CVE JSON

{
  "id": "CVE-2026-14465",
  "sourceIdentifier": "[email protected]",
  "published": "2026-08-04T10:19:32.293",
  "lastModified": "2026-10-23T23:10:00.157",
  "vulnStatus": "Deferred",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Insufficient session expiration vulnerability in Bilin Software and Informatics Consultancy Inc. HUMANIST Digital Human Resources allows Reusing Session IDs (aka Session Replay).\n\nThis issue affects HUMANIST Digital Human Resources: from 26.0 before 26.1."
    },
    {
      "lang": "es",
      "value": "Vulnerabilidad de expiración de sesión insuficiente en Bilin Software and Informatics Consultancy Inc. HUMANIST Digital Human Resources permite la Reutilización de IDs de Sesión (también conocido como Replay de Sesión).\n\nEste problema afecta a HUMANIST Digital Human Resources: desde la versión 26.0 hasta antes de la 26.1."
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "Bilin Software and Informatics Consultancy Inc.",
          "product": "HUMANIST Digital Human Resources",
          "defaultStatus": "unaffected",
          "versions": [
            {
              "version": "26.0",
              "lessThan": "26.1",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "[email protected]",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
          "baseScore": 6.5,
          "baseSeverity": "MEDIUM",
          "attackVector": "NETWORK",
          "attackComplexity": "LOW",
          "privilegesRequired": "NONE",
          "userInteraction": "REQUIRED",
          "scope": "UNCHANGED",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "NONE",
          "availabilityImpact": "NONE"
        },
        "exploitabilityScore": 2.8,
        "impactScore": 3.6
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "timestamp": "2026-08-04T13:01:15.563503Z",
          "id": "CVE-2026-14465",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "role": "CISA Coordinator",
          "version": "2.0.3"
        }
      }
    ]
  },
  "weaknesses": [
    {
      "source": "[email protected]",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-613"
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0737",
      "source": "[email protected]"
    }
  ]
}