PT-2026-67678 · Unknown · Humanist Digital Human Resources

CVE-2026-14175

·

Published

2026-08-04

·

Updated

2026-08-04

CVSS v3.1

9.8

Critical

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions HUMANIST Digital Human Resources versions 26.0 through 26.0
Description An unrestricted file upload flaw allows the upload of dangerous file types, such as a Web Shell, to a web server. A Web Shell is a malicious script that allows remote administration of the compromised server.
Recommendations Update HUMANIST Digital Human Resources to version 26.1.

Fix

Unrestricted File Upload

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-434

Related Identifiers

CVE-2026-14175

Affected Products

Humanist Digital Human Resources