CVE-2026-14194 — Path Traversal Allows Arbitrary File Download in Bilin Software's HUMANIST Digital Human Resources

CVE-2026-14194

Path Traversal Allows Arbitrary File Download in Bilin Software's HUMANIST Digital Human Resources PUBLISHED

Description (CNA)

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Bilin Software and Informatics Consultancy Inc. HUMANIST Digital Human Resources allows Path Traversal. This issue affects HUMANIST Digital Human Resources: from 26.0 before 26.1.

Affected (CNA)

Vendor / product	Versions
Bilin Software and Informatics Consultancy Inc. / HUMANIST Digital Human Resources	affected 26.0 before 26.1

CWE

CWE-22

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0737

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.