This vulnerability (CVE-2026-14202) involves an observable response discrepancy in HUMANIST Digital Human Resources software by Bilin Software and Informatics Consultancy Inc. The flaw allows attackers to perform account footprinting, which is the ability to determine valid accounts by analyzing differences in system responses. The affected version is 26.0, with versions before 26.1 impacted. The CVSS 3.1 vector indicates the vulnerability is remotely exploitable over the network without privileges or user interaction and impacts confidentiality with limited impact (C:L, I:N, A:N). No vendor advisory or patch information is currently available.

The vulnerability enables attackers to perform account footprinting, potentially allowing them to enumerate valid user accounts by observing differences in system responses. This can aid in further targeted attacks or reconnaissance. The impact is limited to confidentiality with no integrity or availability impact. There is no evidence of active exploitation in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or temporary workaround is provided, users should monitor vendor communications for updates. Until a patch is available, limit exposure of the affected version 26.0 to untrusted networks if possible.