This vulnerability (CVE-2026-14219) is classified as CWE-601, an open redirect flaw in HUMANIST Digital Human Resources version 26.0. It allows attackers to craft URLs that redirect users to untrusted external sites, potentially enabling phishing attacks. The CVSS 3.1 base score is 5.4 (AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N), indicating network attack vector, low attack complexity, requiring low privileges and user interaction, with partial impact on confidentiality and integrity and no impact on availability. There is no vendor advisory or patch information available at this time.

The vulnerability enables attackers to redirect users to malicious websites, increasing the risk of phishing attacks that could compromise user credentials or personal information. The impact is limited to confidentiality and integrity with no availability impact. Exploitation requires user interaction and low privileges.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users and administrators should be cautious of suspicious links and verify URLs before clicking. No official remediation or temporary fix has been published by the vendor.