VulnerabilityDeferred

CVE-2026-14465

Insufficient session expiration vulnerability in Bilin Software and Informatics Consultancy Inc.

MEDIUM 6.5EPSS 0.21%

Does this matter?

Lower severity and a low EPSS score (0.21%). Track it; it rarely justifies an emergency change on its own.

Description

Insufficient session expiration vulnerability in Bilin Software and Informatics Consultancy Inc. HUMANIST Digital Human Resources allows Reusing Session IDs (aka Session Replay). This issue affects HUMANIST Digital Human Resources: from 26.0 before 26.1.

CVSS 3.1: 6.5 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
EPSS: 0.21% probability · 11th percentile
CISA KEV: Not listed
Weakness: CWE-613
Source: iletisim@usom.gov.tr

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0737

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.