Medium · 6.5 CVE-2026-105457 EUVD-2026-111851GHSA-v4rx-xwqp-8v54

Authenticated Arbitrary Local File Read via Path Traversal in HAVELSAN's Liman MYS

Published Oct 28, 2026 · Updated Nov 5, 2026 · Assigned by TR-CERT

Description

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in HAVELSAN Inc. Liman MYS allows Path Traversal.

This issue affects Liman MYS: before 2.3.5-1132.

Vendor	Product	Affected	Fixed
HAVELSAN	Liman MYS	< 2.3.5-1132	2.3.5-1132