Skip to content
OpenAdvisories

Vendor

HAVELSAN

17 known vulnerabilities.

Products

Liman MYS 9 Sef - AI Chatbot Platform 4 Liman Render Engine 3 Dialogue 1
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Medium 6.5
    CVE-2026-105457

    Authenticated Arbitrary Local File Read via Path Traversal in HAVELSAN's Liman MYS

    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in HAVELSAN Inc. Liman MYS allows Path Traversal. This issue affects Liman MYS: before 2.3.5-1132.

    HAVELSAN Liman MYS
  • Medium 5.3
    CVE-2026-80337

    Unauthorized Cross-Chatbot Tool Invocation in HAVELSAN's Sef - AI Chatbot Platform

    Missing Authorization vulnerability in HAVELSAN Inc. Sef - AI Chatbot Platform allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Sef - AI Chatbot Platform: before 2.1. NOTE: The vendor was contacted and it was learned that th…

    HAVELSAN Sef - AI Chatbot Platform
  • Medium 4.9
    CVE-2026-80464

    API Tool Runner SSRF in HAVELSAN's Sef - AI Chatbot Platform

    Server-Side request forgery (SSRF) vulnerability in HAVELSAN Inc. Sef - AI Chatbot Platform allows Server Side Request Forgery. This issue affects Sef - AI Chatbot Platform: before 2.1. NOTE: The vendor was contacted and it was learned that the product is not…

    HAVELSAN Sef - AI Chatbot Platform
  • Medium 5.9
    CVE-2026-77707

    TLS Certificate Validation Disabled for Keycloak Connections in HAVELSAN's Liman Render Engine

    Improper certificate validation vulnerability in HAVELSAN Inc. Liman Render Engine allows Adversary in the Middle (AiTM). This issue affects Liman Render Engine: from 1.0 before 1.2-75.

    HAVELSAN Liman Render Engine
  • Medium 5.9
    CVE-2026-77703

    SSH Host Key Verification Bypass in HAVELSAN's Liman Render Engine

    Key exchange without entity authentication vulnerability in HAVELSAN Inc. Liman Render Engine allows Adversary in the Middle (AiTM). This issue affects Liman Render Engine: from 1.0 before 1.2-75.

    HAVELSAN Liman Render Engine
  • Medium 5.3
    CVE-2026-19532

    Path Traversal in HAVELSAN's Liman MYS

    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in HAVELSAN Inc. Liman MYS allows Path Traversal. This issue affects Liman MYS: from 2.3.2 before 2.3.4-1124.

    HAVELSAN Liman MYS
  • Medium 4.8
    CVE-2025-1269

    Open Redirect in HAVELSAN's Open Source Project Liman MYS

    URL Redirection to Untrusted Site ('Open Redirect') vulnerability in HAVELSAN Liman MYS allows Cross-Site Flashing. This issue affects Liman MYS: before 2.1.1 - 1010.

    HAVELSAN Liman MYS