CVE-2026-15721

Summary

The flaw is a cleartext storage of sensitive information and SQL Injection vulnerability in HUMANIST Digital Human Resources versions before 26.1, allowing attackers to access sensitive data through unencrypted storage and execute malicious SQL commands.

Exploitability

Exploitation requires access to the affected application's database or network traffic interception; preconditions include the presence of sensitive information stored in cleartext.

Blast radius

If exploited, this vulnerability could lead to unauthorized data exposure, system compromise, and potential loss of confidentiality and integrity of sensitive HR data.

Prioritized remediation

Update HUMANIST Digital Human Resources to version 26.1 or later to mitigate the SQL Injection risk and ensure secure storage of sensitive information.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.