CVE-2026-15721: critical vulnerability in Bilin Software and Informatics Consultancy Inc.
Query Console SQL Injection Leading to Sensitive Data Disclosure in Bilin Software's HUMANIST Digital Human Resources
Published
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
28Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 9.8epss 0.3%
Cleartext storage of sensitive information vulnerability in Bilin Software and Informatics Consultancy Inc. HUMANIST Digital Human Resources allows SQL Injection.
This issue affects HUMANIST Digital Human Resources: from 26.0 before 26.1.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Related CVEs — Bilin Software and Informatics Consultancy Inc.
In the same product, most dangerous first.
CVE-2026-14175CRITICALUnrestricted File Upload in Bilin Software's HUMANIST Digital Human ResourcesEPSS 0.5%CVE-2026-14194MEDIUMPath Traversal Allows Arbitrary File Download in Bilin Software's HUMANIST Digital Human ResourcesEPSS 0.4%CVE-2026-14804CRITICALHardcoded Cryptographic Key in Bilin Software's HUMANIST Digital Human ResourcesEPSS 0.4%CVE-2026-14465MEDIUMSession Fixation in Bilin Software's HUMANIST Digital Human ResourcesEPSS 0.4%CVE-2026-14838HIGHSession Token Exposure in URL Leading to Account Takeover in Bilin Software's HUMANIST Digital Human ResourcesEPSS 0.3%CVE-2026-14202MEDIUMUsername Enumeration via Differential Login Responses in Bilin Software's HUMANIST Digital Human ResourcesEPSS 0.3%