CVE-2026-14804

Full vulnerability record from the local CVENow database.

Description

Use of hard-coded cryptographic key vulnerability in Bilin Software and Informatics Consultancy Inc. HUMANIST Digital Human Resources allows Read Sensitive Constants Within an Executable. This issue affects HUMANIST Digital Human Resources: from 26.0 before 26.1.

Severity

CRITICAL

CVSS score

9.1 (v3.1)

Vulnerability status

Deferred

Source identifier

[email protected]

Published

2026-08-04 10:19:32.417000

Last modified

2026-10-23 23:10:00.157000

View original CVE JSON

{
  "id": "CVE-2026-14804",
  "sourceIdentifier": "[email protected]",
  "published": "2026-08-04T10:19:32.417",
  "lastModified": "2026-10-23T23:10:00.157",
  "vulnStatus": "Deferred",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Use of hard-coded cryptographic key vulnerability in Bilin Software and Informatics Consultancy Inc. HUMANIST Digital Human Resources allows Read Sensitive Constants Within an Executable.\n\nThis issue affects HUMANIST Digital Human Resources: from 26.0 before 26.1."
    },
    {
      "lang": "es",
      "value": "Uso de vulnerabilidad de clave criptográfica codificada de forma rígida en Bilin Software and Informatics Consultancy Inc. HUMANIST Digital Human Resources permite leer constantes sensibles dentro de un ejecutable.\n\nEste problema afecta a HUMANIST Digital Human Resources: desde 26.0 antes de 26.1."
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "Bilin Software and Informatics Consultancy Inc.",
          "product": "HUMANIST Digital Human Resources",
          "defaultStatus": "unaffected",
          "versions": [
            {
              "version": "26.0",
              "lessThan": "26.1",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "[email protected]",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
          "baseScore": 9.1,
          "baseSeverity": "CRITICAL",
          "attackVector": "NETWORK",
          "attackComplexity": "LOW",
          "privilegesRequired": "NONE",
          "userInteraction": "NONE",
          "scope": "UNCHANGED",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "availabilityImpact": "NONE"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 5.2
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "timestamp": "2026-08-04T13:10:23.208118Z",
          "id": "CVE-2026-14804",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "yes"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "role": "CISA Coordinator",
          "version": "2.0.3"
        }
      }
    ]
  },
  "weaknesses": [
    {
      "source": "[email protected]",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-321"
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0737",
      "source": "[email protected]"
    }
  ]
}