CVE-2026-15721
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk14th percentile - higher than 14% of all known CVEs
Summary
In HUMANIST Digital Human Resources by Bilin Software and Informatics Consultancy Inc., there is a vulnerability involving cleartext storage of sensitive information that allows SQL Injection. The issue affects versions from 26.0 before 26.1.
Risk Assessment
An attacker can exploit SQL injection to gain unauthorized access to data, modify or delete it, posing a serious threat to data confidentiality and integrity.
Recommendation
It is recommended to immediately update to version 26.1 or later, which contains a fix eliminating this vulnerability.
Original NVD description (English source)
Cleartext storage of sensitive information vulnerability in Bilin Software and Informatics Consultancy Inc. HUMANIST Digital Human Resources allows SQL Injection. This issue affects HUMANIST Digital Human Resources: from 26.0 before 26.1.