Critical vulnerabilities found in German enterprise software HUMANIST HR and Adobe Campaign

The HUMANIST Digital Human Resources system, used by many German companies, has three critical CVEs (CVE‑2026‑14175, CVE‑2026‑14804 and CVE‑2026‑15721) affecting version 26.0. The flaws allow malicious file uploads, expose a hard‑coded cryptographic key and store sensitive data in clear text. Bilin Software and Informatics Consultancy Inc. advises customers to upgrade to version 26.1, where the issues are resolved.

Adobe has issued a security update for Adobe Campaign Classic that patches a critical CVE‑2026‑48303. The vulnerability, present in on‑premises installations up to version 7.4.3 build 9394 on Windows and Linux, enables arbitrary code execution through incorrect authorization. Adobe recommends immediate installation of the update (build 9396) for affected systems.

Both vendors stress that German enterprises running these applications should apply the patches promptly to prevent potential data breaches or system compromise.