CVE-2026-14838General

LOWCVSS 7.4 · HIGH

Signal is active with 3 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Use of GET request method with sensitive query strings vulnerability in Bilin Software and Informatics Consultancy Inc. HUMANIST Digital Human Resources allows Session Hijacking. This issue affects HUMANIST Digital Human Resources: from 26.0 before 26.1.

Back to dashboard

0.0/ 10 priority

Sources & remediation

Other references

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0737

Weakness type (CWE)

CWE-598

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

3 mentions across 1 observed day

What's happening

Technical details provided in 3 signals
General: 2 classified signals
Disclosure: 1 classified signal
3 total mentions across 1 day

Deep dive

Activity timeline3 mentions / 1d

Signal classification2 categories

General

266.7%

Disclosure

133.3%

Referenced assets4 URLs

By indicator

Full discourse3 posts

Vulmon Vulnerability Feed@VulmonFeeds90d
Disclosure
CVE-2026-14838 Session Hijacking via GET Request Query Strings in HUMANIST Digit... https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-14838 Vulnerability Alert Subscriptions: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=1
Post summary
The post announces the CVE-2026-14838 vulnerability—identified as a session hijacking issue via GET query strings in HUMANIST Digit—and directs readers to a Vulmon page for more details.
0000074
4.1K followersView on X
Infoflowcloud@infoflowcloud90d
General
🚨*CVE* CVE-2026-14838 Use of GET request method with sensitive query strings vulnerability in Bilin Software and Informatics Consultancy Inc. HUMANIST Digital Human Resources allows Sessio… https://www.cve.org/CVERecord?id=CVE-2026-14838 ----- Traducción: CVE-2026-14838 Uso… http://infoflow.cloud`
Post summary
The tweet merely states the CVE identifier, a brief description, and links to the CVE record, with no evidence of PoC, exploit, patch, or live exploitation.
0000034
96 followersView on X
CVE@CVEnew90d
General
CVE-2026-14838 Use of GET request method with sensitive query strings vulnerability in Bilin Software and Informatics Consultancy Inc. HUMANIST Digital Human Resources allows Sessio… https://www.cve.org/CVERecord?id=CVE-2026-14838
Post summary
The post merely cites a CVE record with a brief description of the vulnerability type, providing no further technical, exploit, or mitigation details.
00000777
57.9K followersView on X

Explore more

Back to dashboard