CVE-2026-14175

CriticalCVSS 9.8

Published: 04/08/2026(UTC)Updated: 04/08/2026(UTC)Translated: 05/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.40%

32th percentile - higher than 32% of all known CVEs

Summary

Unrestricted upload of dangerous file types in HUMANIST Digital Human Resources allows uploading a web shell to the server. Affects versions from 26.0 before 26.1.

Risk Assessment

An attacker can gain remote control of the server, leading to full system and data compromise.

Recommendation

Upgrade HUMANIST Digital Human Resources to version 26.1 or later, which includes the fix.

Original NVD description (English source)

Unrestricted upload of file with dangerous type vulnerability in Bilin Software and Informatics Consultancy Inc. HUMANIST Digital Human Resources allows Upload a Web Shell to a Web Server. This issue affects HUMANIST Digital Human Resources: from 26.0 before 26.1.