Vulnerabilities

TI-2026-81795 CVE-2026-105457 · GHSA-v4rx-xwqp-8v54

Path traversal in HAVELSAN Liman MYS lets users read local files

LOW 29

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in HAVELSAN Inc.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00424 Published 2026-10-28 Fixed in 2.3.5-1132 CWE-22

TI-2026-80342 CVE-2026-94380 · GHSA-qh9j-c6pq-98xh

Weak password recovery in HAVELSAN Liman MYS

LOW 37

Weak Password Recovery Mechanism for Forgotten Password vulnerability in HAVELSAN Inc.

CVSS 3.1HIGH 8.1 Network No auth User interaction EPSS 0.00322 Published 2026-10-26 Fixed in 2.3.5-1131 CWE-640

TI-2026-65866 CVE-2026-80298 · GHSA-4fxr-7rqw-6ppg

SQL Injection in HAVELSAN's Sef - AI Chatbot Platform

MEDIUM 40

Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in HAVELSAN Inc.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00295 Published 2026-10-02 Fixed in 2.1 CWE-89

TI-2026-65868 CVE-2026-80443 · GHSA-679g-qgm4-wf24

Insecure TLS Certificate Validation in API Tool Runner in HAVELSAN's Sef - AI Chatbot Platform

LOW 34

Improper certificate validation vulnerability in HAVELSAN Inc.

CVSS 3.1HIGH 7.4 Network No auth No interaction EPSS 0.00163 Published 2026-10-02 Fixed in 2.1 CWE-295

TI-2026-65867 CVE-2026-80337 · GHSA-352f-59q8-5jw5

Unauthorized Cross-Chatbot Tool Invocation in HAVELSAN's Sef - AI Chatbot Platform

LOW 23

Missing Authorization vulnerability in HAVELSAN Inc.

CVSS 3.1MEDIUM 5.3 Network Low privileges No interaction EPSS 0.0021 Published 2026-10-02 Fixed in 2.1 CWE-862

TI-2026-65869 CVE-2026-80464 · GHSA-pg74-28w9-6j58

API Tool Runner SSRF in HAVELSAN's Sef - AI Chatbot Platform

LOW 22

Server-Side request forgery (SSRF) vulnerability in HAVELSAN Inc.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00274 Published 2026-10-02 Fixed in 2.1 CWE-918

TI-2026-54143 CVE-2026-77707 · GHSA-5r56-296v-6jj6

TLS Certificate Validation Disabled for Keycloak Connections in HAVELSAN's Liman Render Engine

LOW 25

Improper certificate validation vulnerability in HAVELSAN Inc.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00132 Published 2026-09-24 Fixed in 1.2-75 CWE-295

TI-2026-54140 CVE-2026-77703 · GHSA-f9gv-cv7x-jrv2

SSH Host Key Verification Bypass in HAVELSAN's Liman Render Engine

LOW 26

Key exchange without entity authentication vulnerability in HAVELSAN Inc.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00239 Published 2026-09-24 Fixed in 1.2-75 CWE-322

TI-2026-15891 CVE-2026-19532 · GHSA-2856-899r-4g93

Path Traversal in HAVELSAN's Liman MYS

LOW 30

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in HAVELSAN Inc.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00263 Published 2026-09-24 Fixed in 2.3.4-1124 CWE-22

TI-2026-15283 CVE-2026-18650 · GHSA-c8qw-pv9p-qhf7

Missing Authorization Leading to Root Code Execution in HAVELSAN's Liman MYS

MEDIUM 40

Missing Authorization vulnerability in HAVELSAN Inc.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00417 Published 2026-08-04 Fixed in 2.3.1 CWE-862

TI-2026-14202 CVE-2026-17070 · GHSA-xppc-p674-7v8r

Vault Credential Confusion via Authorization Bypass in HAVELSAN's Liman MYS

MEDIUM 40

Missing Authorization vulnerability in HAVELSAN Inc.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00417 Published 2026-08-04 Fixed in 2.3.1 CWE-862

TI-2026-11546 CVE-2026-13696 · GHSA-44vj-xc6r-j6m3

LDAP Injection in HAVELSAN's Liman MYS

MEDIUM 41

Improper neutralization of special elements used in an LDAP query ('LDAP injection') vulnerability in HAVELSAN Inc.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00518 Published 2026-07-07 Fixed in release.master.1107 CWE-90

TI-2026-09796 CVE-2026-11348 · GHSA-cmjg-6q27-6fr4

Authentication Bypass in HAVELSAN's Open Source Project Liman MYS

LOW 37

Improper verification of cryptographic signature vulnerability in HAVELSAN Inc.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00254 Published 2026-07-07 Fixed in release.master.1107 CWE-347

TI-2026-09789 CVE-2026-11340 · GHSA-6xf8-9p5r-2vcr

Authorization Bypass in HAVELSAN's Open Source Project Liman MYS

LOW 36

Missing Authorization vulnerability in HAVELSAN Inc.

CVSS 3.1HIGH 8.3 Network Low privileges No interaction EPSS 0.0035 Published 2026-07-07 Fixed in release.master.1107 CWE-862

TI-2025-01083 CVE-2025-1269 · GHSA-jhqw-cq3q-2p2g

Open Redirect in HAVELSAN's Open Source Project Liman MYS

LOW 21

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in HAVELSAN Liman MYS allows Cross-Site Flashing.

CVSS 3.1MEDIUM 4.8 Adjacent network Low privileges User interaction EPSS 0.0018 Published 2025-02-18 Fixed in 2.1.1 - 1010 CWE-601

TI-2024-03159 CVE-2024-3375 · GHSA-4wch-q26f-448q

Broken Access Control in Havelsan's Dialogue

MEDIUM 49

Incorrect Permission Assignment for Critical Resource vulnerability in Havelsan Inc.

CVSS 3.1CRITICAL 9.4 Network No auth No interaction EPSS 0.00465 Published 2024-04-29 Fixed in v1.83.1 or v1.84 CWE-732

Vulnerabilities

Filters