High · 8.1 CVE-2026-94380 EUVD-2026-109777GHSA-qh9j-c6pq-98xh

Host Header Injection in HAVELSAN's Liman MYS

Published Oct 26, 2026 · Updated Oct 26, 2026 · Assigned by TR-CERT

Description

Weak Password Recovery Mechanism for Forgotten Password vulnerability in HAVELSAN Inc. Liman MYS allows Password Recovery Exploitation.

This issue affects Liman MYS: from 2.3.4-1124 before 2.3.5-1131.

Vendor	Product	Affected	Fixed
HAVELSAN	Liman MYS	2.3.4-1124 – < 2.3.5-1131	2.3.5-1131