High · 8.8 CVE-2026-13696 EUVD-2026-42035GHSA-44vj-xc6r-j6m3

LDAP Injection in HAVELSAN's Liman MYS

Published Jul 7, 2026 · Updated Jul 7, 2026 · Assigned by TR-CERT

Description

Improper neutralization of special elements used in an LDAP query ('LDAP injection') vulnerability in HAVELSAN Inc. Liman MYS allows LDAP Injection.

This issue affects Liman MYS: before release.Master.1107.

Vendor	Product	Affected	Fixed
HAVELSAN	Liman MYS	< release.master.1107	release.master.1107