CVE-2026-14804

CriticalCVSS 9.1

Published: 04/08/2026(UTC)Updated: 04/08/2026(UTC)Translated: 05/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.31%

23th percentile - higher than 23% of all known CVEs

Summary

HUMANIST Digital Human Resources by Bilin Software contains a hard-coded cryptographic key vulnerability, allowing read of sensitive constants within an executable.

Risk Assessment

An attacker can extract the cryptographic key from the executable, potentially leading to data confidentiality breaches or impersonation.

Recommendation

Update HUMANIST Digital Human Resources to version 26.1 or later, which includes a fix removing the hard-coded key.

Original NVD description (English source)

Use of hard-coded cryptographic key vulnerability in Bilin Software and Informatics Consultancy Inc. HUMANIST Digital Human Resources allows Read Sensitive Constants Within an Executable. This issue affects HUMANIST Digital Human Resources: from 26.0 before 26.1.