Vulnerabilities

TI-2026-12031 CVE-2026-14202 · GHSA-wfv2-mrh8-3fx5

Username Enumeration via Differential Login Responses in Bilin Software's HUMANIST Digital Human Resources

LOW 30

Observable response discrepancy vulnerability in Bilin Software and Informatics Consultancy Inc.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.0033 Published 2026-08-04 Fixed in 26.1 CWE-204

TI-2026-12224 CVE-2026-14465 · GHSA-fhhf-pqcg-p3jc

LOW 29

Insufficient session expiration vulnerability in Bilin Software and Informatics Consultancy Inc.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00354 Published 2026-08-04 Fixed in 26.1 CWE-613

TI-2026-12023 CVE-2026-14192 · GHSA-qrm8-6428-fgf7

LOW 24

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Bilin Software and Informatics Consultancy Inc.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00226 Published 2026-08-04 Fixed in 26.1 CWE-79

TI-2026-12508 CVE-2026-14838 · GHSA-chm9-7crh-67fc

LOW 34

Use of GET request method with sensitive query strings vulnerability in Bilin Software and Informatics Consultancy Inc.

CVSS 3.1HIGH 7.4 Network No auth No interaction EPSS 0.00341 Published 2026-08-04 Fixed in 26.1 CWE-598

TI-2026-12480 CVE-2026-14804 · GHSA-qp3g-4h67-f237

MEDIUM 47

Use of hard-coded cryptographic key vulnerability in Bilin Software and Informatics Consultancy Inc.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00404 Published 2026-08-04 Fixed in 26.1 CWE-321

TI-2026-12045 CVE-2026-14219 · GHSA-82mx-8rw9-8rcf

LOW 24

URL redirection to untrusted site ('open redirect') vulnerability in Bilin Software and Informatics Consultancy Inc.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00207 Published 2026-08-04 Fixed in 26.1 CWE-601

TI-2026-12025 CVE-2026-14194 · GHSA-v8cj-x2cf-86x7

LOW 29

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Bilin Software and Informatics Consultancy Inc.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00443 Published 2026-08-04 Fixed in 26.1 CWE-22

TI-2026-12010 CVE-2026-14175 · GHSA-75vh-8xgg-597q

MEDIUM 43

Unrestricted upload of file with dangerous type vulnerability in Bilin Software and Informatics Consultancy Inc.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00522 Published 2026-08-04 Fixed in 26.1 CWE-434

TI-2026-13228 CVE-2026-15721 · GHSA-qhjg-59pv-84j4

MEDIUM 49

Cleartext storage of sensitive information vulnerability in Bilin Software and Informatics Consultancy Inc.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00294 Published 2026-08-04 Fixed in 26.1 CWE-312