EUVD-2026-52651
GHSA-qp3g-4h67-f237
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Key must first be extracted from the binary (a non-trivial one-time step, so AC:H), but once recovered it is reusable network-wide without auth (AV:N/PR:N), impacting confidentiality and integrity only.
Primary rating from Vendor (TR-CERT).
CVSS VectorVendor: TR-CERT
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Lifecycle Timeline
3DescriptionCVE.org
Use of hard-coded cryptographic key vulnerability in Bilin Software and Informatics Consultancy Inc. HUMANIST Digital Human Resources allows Read Sensitive Constants Within an Executable.
This issue affects HUMANIST Digital Human Resources: from 26.0 before 26.1.
AnalysisAI
Sensitive-data exposure in Bilin Software's HUMANIST Digital Human Resources (versions 26.0 up to but not including 26.1) stems from a cryptographic key embedded directly in the application binary, letting attackers recover the same static key from any deployment and abuse it against protected data. Because the key is identical across all installations, its extraction undermines confidentiality and integrity of anything it protects. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires that the attacker first obtain the vulnerable HUMANIST Digital HR executable (versions 26.0 through pre-26.1) and extract the embedded cryptographic constant - a one-time reverse-engineering step against the binary. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The vendor/NVD CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N, C:H/I:H/A:N, score 9.1) rates this as critical network-exploitable without authentication, which is defensible for a hard-coded key: once the universal key is extracted from any copy of the binary, it can be reused remotely against every deployment to decrypt or forge data without further credentials. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | An attacker obtains a copy of the HUMANIST Digital HR executable (as a customer, via a leak, or from a shared distribution), decompiles or inspects it, and extracts the hard-coded cryptographic key. Using that universal key, the attacker then decrypts intercepted sensitive HR data or forges/validates cryptographically protected values against any deployment over the network, without needing valid credentials. … |
| Remediation | Upgrade to HUMANIST Digital Human Resources version 26.1, which is the first release outside the affected range and constitutes the vendor fix (Vendor-released patch: 26.1). … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, identify and inventory all HUMANIST Digital Human Resources deployments running versions 26.0 through 26.0.x, prioritize systems containing sensitive employee records, assess data exposure scope, and notify your legal and compliance teams of potential breach notification obligations under applicable regulations. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Remote code execution in Bilin Software HUMANIST Digital Human Resources versions 26.0 through 26.1 allows unauthenticat
Cleartext storage of sensitive information combined with SQL injection affects Bilin Software's HUMANIST Digital Human R
Session hijacking is possible in HUMANIST Digital Human Resources (versions 26.0 through before 26.1) due to sensitive s
Insufficient session expiration in HUMANIST Digital Human Resources version 26.0 allows an attacker who obtains a valid
Path traversal in HUMANIST Digital Human Resources version 26.0 enables authenticated remote attackers to read arbitrary
Stored XSS in HUMANIST Digital Human Resources version 26.0 enables authenticated low-privilege users to inject persiste
Open redirect in HUMANIST Digital Human Resources (versions 26.0 through pre-26.1) enables authenticated attackers to cr
Observable response discrepancy in HUMANIST Digital Human Resources 26.0 exposes the system to unauthenticated account f
Same weakness CWE-321 – Use of Hard-coded Cryptographic Key
View allSame technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today