CVE-2026-14219 is an open redirect vulnerability (CWE-601) in HUMANIST Digital Human Resources software by Bilin Software and Informatics Consultancy Inc. The affected versions are from 26.0 before 26.1. This vulnerability allows an attacker to craft URLs that redirect users to untrusted external sites, potentially enabling phishing attacks. The CVSS 3.1 base score is 5.4, indicating moderate impact with network attack vector, low attack complexity, requiring privileges and user interaction, and partial confidentiality and integrity impact without availability impact. No known exploits are reported in the wild, and no patch or official fix has been documented.

The vulnerability enables attackers to redirect users to untrusted sites, which can be leveraged for phishing attacks to steal credentials or deliver malicious payloads. Confidentiality and integrity impacts are rated low, with no impact on availability. The attack requires user interaction and some privileges, limiting ease of exploitation but still posing a risk to users of affected versions.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should be cautious of suspicious URLs and avoid clicking on unexpected links within the affected software. Monitor vendor communications for updates regarding patches or mitigations.