Skip to content
OpenAdvisories

Vendor

HAVELSAN

17 known vulnerabilities.

Products

Liman MYS 9 Sef - AI Chatbot Platform 4 Liman Render Engine 3 Dialogue 1
All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

  • High 7.8
    CVE-2026-119474

    Privilege Escalation in HAVELSAN's Liman Render Engine

    Incorrect Permission Assignment for Critical Resource vulnerability in HAVELSAN Inc. Liman Render Engine allows Privilege Escalation. This issue affects Liman Render Engine: before 1.2-81.

    HAVELSAN Liman Render Engine
  • High 8.1
    CVE-2026-94380

    Host Header Injection in HAVELSAN's Liman MYS

    Weak Password Recovery Mechanism for Forgotten Password vulnerability in HAVELSAN Inc. Liman MYS allows Password Recovery Exploitation. This issue affects Liman MYS: from 2.3.4-1124 before 2.3.5-1131.

    HAVELSAN Liman MYS
  • High 8.8
    CVE-2026-80298

    SQL Injection in HAVELSAN's Sef - AI Chatbot Platform

    Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in HAVELSAN Inc. Sef - AI Chatbot Platform allows SQL Injection. This issue affects Sef - AI Chatbot Platform: before 2.1. NOTE: The vendor was contacted and it…

    HAVELSAN Sef - AI Chatbot Platform
  • High 7.4
    CVE-2026-80443

    Insecure TLS Certificate Validation in API Tool Runner in HAVELSAN's Sef - AI Chatbot Platform

    Improper certificate validation vulnerability in HAVELSAN Inc. Sef - AI Chatbot Platform allows Adversary in the Middle (AiTM). This issue affects Sef - AI Chatbot Platform: before 2.1. NOTE: The vendor was contacted and it was learned that the product is not…

    HAVELSAN Sef - AI Chatbot Platform
  • High 8.8
    CVE-2026-18650

    Missing Authorization Leading to Root Code Execution in HAVELSAN's Liman MYS

    Missing Authorization vulnerability in HAVELSAN Inc. Liman MYS allows Privilege Escalation. This issue affects Liman MYS: from 2.2.3 before 2.3.1.

    HAVELSAN Liman MYS
  • High 8.8
    CVE-2026-17070

    Vault Credential Confusion via Authorization Bypass in HAVELSAN's Liman MYS

    Missing Authorization vulnerability in HAVELSAN Inc. Liman MYS allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Liman MYS: from 2.2.3 before 2.3.1.

    HAVELSAN Liman MYS
  • High 8.8
    CVE-2026-13696

    LDAP Injection in HAVELSAN's Liman MYS

    Improper neutralization of special elements used in an LDAP query ('LDAP injection') vulnerability in HAVELSAN Inc. Liman MYS allows LDAP Injection. This issue affects Liman MYS: before release.Master.1107.

    HAVELSAN Liman MYS
  • High 8.1
    CVE-2026-11348

    Authentication Bypass in HAVELSAN's Open Source Project Liman MYS

    Improper verification of cryptographic signature vulnerability in HAVELSAN Inc. Liman MYS allows Fake the Source of Data. This issue affects Liman MYS: before release.Master.1107.

    HAVELSAN Liman MYS
  • High 8.3
    CVE-2026-11340

    Authorization Bypass in HAVELSAN's Open Source Project Liman MYS

    Missing Authorization vulnerability in HAVELSAN Inc. Liman MYS allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Liman MYS: before release.Master.1107.

    HAVELSAN Liman MYS