CVE-2026-14219 describes an open redirect vulnerability in HUMANIST Digital Human Resources version 26.0 by Bilin Software and Informatics Consultancy Inc. The flaw allows attackers to craft URLs that redirect users to untrusted external sites, potentially enabling phishing attacks. The vulnerability is classified under CWE-601 and has a CVSS 3.1 base score of 5.4, indicating medium severity. There is no vendor advisory or patch available at this time, and the product is not a cloud service, so remediation depends on vendor action or user mitigation.

The vulnerability enables attackers to redirect users from the legitimate HUMANIST Digital Human Resources application to malicious external websites. This can be leveraged in phishing campaigns to deceive users into divulging sensitive information or credentials. The impact includes limited confidentiality and integrity loss but no availability impact. There are no known exploits in the wild as of the publication date.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should exercise caution with URLs received from untrusted sources and verify redirect destinations. Organizations may consider implementing web filtering or user awareness training to mitigate phishing risks related to this vulnerability.