CVE-2026-14838
High · 7.4CVSS
7.4
EPSS
—
Published
Aug 4, 2026
CISA due date
—
The record
Use of GET request method with sensitive query strings vulnerability in Bilin Software and Informatics Consultancy Inc. HUMANIST Digital Human Resources allows Session Hijacking. This issue affects HUMANIST Digital Human Resources: from 26.0 before 26.1.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-61614 SolidInvoice is an open-source invoicing platform. CWE-598
- CVE-2026-82181 Medical Practice Management System developed by Le-yan has a Sensitive Data in URL… CWE-598
- CVE-2026-76179 An improper protection of authentication tokens vulnerability exists in certain Ebyte… CWE-598
- CVE-2026-63408 Grav API Plugin is a RESTful API for Grav CMS that provides full headless access to your… CWE-598
- CVE-2026-66832 When the Mira Android app opens in-app WebView content (e.g., shop redirect flows), the… CWE-598
- CVE-2026-54652 Frigate is an open source network video recorder. CWE-598
- CVE-2026-58656 Grav API plugin before v1.0.0-rc.16 accepts JWT tokens via the ?token= URL query… CWE-598
- CVE-2026-10078 A flaw was found in the Quay config-tool's GitLab OAuth validator. CWE-598