HIGHVulnerability
Verified
Global

NVD HIGH: CVE-2026-14838 — Use of GET request method with sensitive query strings vulnerability in Bilin So...

·Source: NIST NVD

Updated:

Executive Summary

Use of GET request method with sensitive query strings vulnerability in Bilin Software and Informatics Consultancy Inc. HUMANIST Digital Human Resources allows Session Hijacking. This issue affects HUMANIST Digital Human Resources: from 26.0 before 26.1.

Analysis

Use of GET request method with sensitive query strings vulnerability in Bilin Software and Informatics Consultancy Inc. HUMANIST Digital Human Resources allows Session Hijacking. This issue affects HUMANIST Digital Human Resources: from 26.0 before 26.1. CVSS Score: 7.4. Published: 2026-08-04T10:19:32.540.

Indicators of Compromise (1)

CVE (1)
CVE-2026-14838
NVDMITRE CVE
Source Attribution

Originally published by NIST NVD on Aug 4, 2026. Verified by: NIST.

Related Threats

MEDIUMVulnerabilityNEW

Burnham Government Could Signal Tougher UK Cyber and AI Regs

<img src="https://ismg-cdn.nyc3.cdn.digitaloceanspaces.com/articles/burnham-government-could-signal-tougher-uk-cyber-ai-regs-image_small-3-a-32413.jpg" align=right hspace=4><b>Attorney Jonathan Armstrong on Labour's Likely Shift to Sovereignty, Data Security</b><br>Andy Burnham's arrival as U.K. prime minister on July 20 could accelerate Labour's push for tougher AI, cyber and data rules. Attorney

Bank Info Security
MEDIUMVulnerabilityNEW

77 Open VSX extensions found harvesting developer info

77 extensions on the Open VSX marketplace impersonated legitimate developer tools while transmitting information about the systems and development environments where they were installed. [...]

BleepingComputer
MEDIUMVulnerabilityNEW

Smoke#Screen RMM Takeover Gambit Exposes Threat Actor Playbook

The attacks use diverse social engineering lures and rotating payloads to deliver ScreenConnect for persistent remote access to compromised networks.

Dark Reading