EUVD-2026-52648
GHSA-75vh-8xgg-597q
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Unauthenticated network-reachable upload with no user interaction yields code execution and full CIA loss, so AV:N/AC:L/PR:N/UI:N and C/I/A:H.
Primary rating from Vendor (TR-CERT).
CVSS VectorVendor: TR-CERT
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Lifecycle Timeline
3DescriptionCVE.org
Unrestricted upload of file with dangerous type vulnerability in Bilin Software and Informatics Consultancy Inc. HUMANIST Digital Human Resources allows Upload a Web Shell to a Web Server.
This issue affects HUMANIST Digital Human Resources: from 26.0 before 26.1.
AnalysisAI
Remote code execution in Bilin Software HUMANIST Digital Human Resources versions 26.0 through 26.1 allows unauthenticated attackers to upload a web shell to the server due to unrestricted file-type validation (CWE-434), resulting in full compromise of the HR application host. Any remote attacker can reach the upload functionality without credentials or user interaction and execute arbitrary commands. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | The specific prerequisite is network reachability of the HUMANIST Digital Human Resources file-upload feature on a vulnerable instance in the 26.0-to-before-26.1 range; per the CVSS vector (AV:N/AC:L/PR:N/UI:N) there are no special conditions - remote unauthenticated exploitation against default configurations of HUMANIST Digital Human Resources with no user interaction. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The signals are consistent and point to genuine high priority. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | An unauthenticated attacker reaches the HUMANIST HR file-upload feature over the network and submits a malicious server-side script disguised as or alongside a permitted document type. Because the application does not restrict dangerous file types, the file lands in a web-accessible path; the attacker then requests its URL, causing the server to execute the web shell and yield remote command execution as the application service account. … |
| Remediation | Upgrade HUMANIST Digital Human Resources to version 26.1 or later, which is the first release outside the affected range and is treated as the fixed version; confirm the exact patched build directly with Bilin Software and review the TR-CERT advisory at https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0737 for vendor guidance. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, immediately disable the file upload functionality in HUMANIST versions 26.0-26.1 via configuration, or take the application offline; simultaneously restrict network access to the application through firewall rules to limit exposure to authorized internal IP addresses only. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Cleartext storage of sensitive information combined with SQL injection affects Bilin Software's HUMANIST Digital Human R
Sensitive-data exposure in Bilin Software's HUMANIST Digital Human Resources (versions 26.0 up to but not including 26.1
Session hijacking is possible in HUMANIST Digital Human Resources (versions 26.0 through before 26.1) due to sensitive s
Insufficient session expiration in HUMANIST Digital Human Resources version 26.0 allows an attacker who obtains a valid
Path traversal in HUMANIST Digital Human Resources version 26.0 enables authenticated remote attackers to read arbitrary
Stored XSS in HUMANIST Digital Human Resources version 26.0 enables authenticated low-privilege users to inject persiste
Open redirect in HUMANIST Digital Human Resources (versions 26.0 through pre-26.1) enables authenticated attackers to cr
Observable response discrepancy in HUMANIST Digital Human Resources 26.0 exposes the system to unauthenticated account f
Same technique File Upload
View allShare
External POC / Exploit Code
Leaving vuln.today