Is CVE-2026-14194 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-14194?

CVE-2026-14194 has a CVSS v3 severity of MEDIUM (6.5).

Back

CVE-2026-14194

Description

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Bilin Software and Informatics Consultancy Inc. HUMANIST Digital Human Resources allows Path Traversal. This issue affects HUMANIST Digital Human Resources: from 26.0 before 26.1.