Paper/Archive/CVE-2026-15721

CVE-2026-15721

Bilin Software and Informatics Consultancy Inc. HUMANIST Digital Human Resources — Query Console SQL Injection Leading to Sensitive Data Disclosure in Bilin Software's HUMANIST Digital Human Resources

EPSS 0.3%CVSS 9.8

critical.is priorityof 100

CVSS 9.8 (CNA)9.8 / 10 × 3029.4 Not in CISA KEV+300.0 EPSS percentile 22.1.221 × 204.4 No public exploit+100.0 SSVC exploitation: none+100.0

Description · from the CVE record

Cleartext storage of sensitive information vulnerability in Bilin Software and Informatics Consultancy Inc. HUMANIST Digital Human Resources allows SQL Injection. This issue affects HUMANIST Digital Human Resources: from 26.0 before 26.1.

Affected

ProductAffectedFixed inSource

HUMANIST Digital Human Resources26.0 – < 26.126.1CNA

Scores by source

TR-CERT (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refsiberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0737