PT-2026-67680 · Unknown · Humanist Digital Human Resources

CVE-2026-14194

·

Published

2026-08-04

·

Updated

2026-08-04

CVSS v3.1

6.5

Medium

VectorAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions HUMANIST Digital Human Resources versions 26.0 through 26.0
Description An improper limitation of a pathname to a restricted directory, known as Path Traversal, allows for the download of arbitrary files.
Recommendations Update HUMANIST Digital Human Resources to version 26.1.

Fix

Path traversal

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2026-14194

Affected Products

Humanist Digital Human Resources