Use of hard-coded cryptographic key vulnerability in Bilin Software and Informatics Consultancy Inc. HUMANIST Digital Human Resources allows Read Sensitive Cons…

A hard-coded cryptographic key vulnerability has been identified in Bilin Software and Informatics Consultancy Inc.'s HUMANIST Digital Human Resources platform. The vulnerability allows attackers to read sensitive constants within the executable, potentially exposing cryptographic secrets. The flaw affects HUMANIST Digital Human Resources versions from 26.0 up to but not including 26.1. The issue is tracked as CVE-2026-14804 and was reported via the Turkish cybersecurity authority siberguvenlik.gov.tr. Hard-coded cryptographic keys pose a significant risk as they cannot be rotated without a software update. Organizations using the affected version should upgrade to version 26.1 or later to mitigate the risk.