Skip to content
OpenAdvisories
Medium · 4.9 CVE-2026-80464 EUVD-2026-91323GHSA-pg74-28w9-6j58

API Tool Runner SSRF in HAVELSAN's Sef - AI Chatbot Platform

Published Oct 2, 2026 · Updated Oct 2, 2026 · Assigned by TR-CERT

Description

Server-Side request forgery (SSRF) vulnerability in HAVELSAN Inc. Sef - AI Chatbot Platform allows Server Side Request Forgery.

This issue affects Sef - AI Chatbot Platform: before 2.1. NOTE: The vendor was contacted and it was learned that the product is not supported.

Affected products

VendorProductAffectedFixed
HAVELSAN Sef - AI Chatbot Platform < 2.1 2.1

References