High · 8.8 CVE-2026-17070 EUVD-2026-52685GHSA-xppc-p674-7v8r

Vault Credential Confusion via Authorization Bypass in HAVELSAN's Liman MYS

Published Aug 4, 2026 · Updated Aug 4, 2026 · Assigned by TR-CERT

Description

Missing Authorization vulnerability in HAVELSAN Inc. Liman MYS allows Accessing Functionality Not Properly Constrained by ACLs.

This issue affects Liman MYS: from 2.2.3 before 2.3.1.

Vendor	Product	Affected	Fixed
HAVELSAN	Liman MYS	2.2.3 – < 2.3.1	2.3.1