HAVELSAN Inc. Sef - AI Chatbot Platform vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting HAVELSAN Inc. Sef - AI Chatbot Platform: 4 record(s), with affected versions and fixes.

CVE-2026-80298 High · 8.8 CWE-89 Oct 2, 2026

SQL Injection in HAVELSAN's Sef - AI Chatbot Platform

Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in HAVELSAN Inc. Sef - AI Chatbot Platform allows SQL Injection. This issue affects Sef - AI Chatbot Platform: before 2.1. NOTE: The vendor was contacted and it was learned that the product is not supported.

CVE-2026-80464 Medium · 4.9 CWE-918 Oct 2, 2026

API Tool Runner SSRF in HAVELSAN's Sef - AI Chatbot Platform

Server-Side request forgery (SSRF) vulnerability in HAVELSAN Inc. Sef - AI Chatbot Platform allows Server Side Request Forgery. This issue affects Sef - AI Chatbot Platform: before 2.1. NOTE: The vendor was contacted and it was learned that the product is not supported.

CVE-2026-80443 High · 7.4 CWE-295 Oct 2, 2026

Insecure TLS Certificate Validation in API Tool Runner in HAVELSAN's Sef - AI Chatbot Platform

Improper certificate validation vulnerability in HAVELSAN Inc. Sef - AI Chatbot Platform allows Adversary in the Middle (AiTM). This issue affects Sef - AI Chatbot Platform: before 2.1. NOTE: The vendor was contacted and it was learned that the product is not supported.

CVE-2026-80337 Medium · 5.3 CWE-862 Oct 2, 2026

Unauthorized Cross-Chatbot Tool Invocation in HAVELSAN's Sef - AI Chatbot Platform

Missing Authorization vulnerability in HAVELSAN Inc. Sef - AI Chatbot Platform allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Sef - AI Chatbot Platform: before 2.1. NOTE: The vendor was contacted and it was learned that the product is not supported.