CVE-2026-14192 is a stored cross-site scripting (XSS) vulnerability in HUMANIST Digital Human Resources software by Bilin Software and Informatics Consultancy Inc. The issue arises from improper neutralization of input during web page generation, enabling attackers to inject and store malicious scripts that execute when viewed by other users. The affected versions are from 26.0 before 26.1. The vulnerability has a CVSS 3.1 score of 5.4 (medium severity) with attack vector network, low attack complexity, requiring privileges and user interaction, and impacts confidentiality and integrity with no availability impact. No patch or official remediation information is currently available.

Successful exploitation could allow an attacker with some privileges and requiring user interaction to execute malicious scripts in the context of other users, potentially leading to partial confidentiality and integrity impacts. There is no reported impact on availability. No known exploits are currently observed in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, consider restricting user input where possible and applying web application firewall rules to detect and block XSS payloads. Monitor vendor communications for updates on patches or official mitigations.