PT-2026-67685 · Unknown · Humanist Digital Human Resources
CVE-2026-14838
·
Published
2026-08-04
·
Updated
2026-08-04
CVSS v3.1
7.4
High
| Vector | AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N |
Name of the Vulnerable Software and Affected Versions
HUMANIST Digital Human Resources versions 26.0 through 26.0
Description
The software uses the GET request method to transmit sensitive query strings, which can lead to session hijacking. This occurs when session tokens are exposed in the URL, potentially allowing an attacker to take over a user account.
Recommendations
Update HUMANIST Digital Human Resources to version 26.1.
Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Humanist Digital Human Resources