Vulnerabilidades de HAVELSAN Inc.

🔔 Criar alerta RSS

CVEs publicadas que afetam produtos de HAVELSAN Inc.: 12 registro(s), com severidade, exploração e correções.

Liman MYS 6 Sef - AI Chatbot Platform 4 Liman Render Engine 2

Somente exploradas (KEV) →

CVE-2026-80298 Alta · 8.8 CWE-89 02/10/2026

SQL Injection in HAVELSAN's Sef - AI Chatbot Platform

Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in HAVELSAN Inc. Sef - AI Chatbot Platform allows SQL Injection. This issue affects Sef - AI Chatbot Platform: before 2.1. NOTE: The vendor was contacted and it was learned that the product is not supported.

CVE-2026-80464 Média · 4.9 CWE-918 02/10/2026

API Tool Runner SSRF in HAVELSAN's Sef - AI Chatbot Platform

Server-Side request forgery (SSRF) vulnerability in HAVELSAN Inc. Sef - AI Chatbot Platform allows Server Side Request Forgery. This issue affects Sef - AI Chatbot Platform: before 2.1. NOTE: The vendor was contacted and it was learned that the product is not supported.

CVE-2026-80443 Alta · 7.4 CWE-295 02/10/2026

Insecure TLS Certificate Validation in API Tool Runner in HAVELSAN's Sef - AI Chatbot Platform

Improper certificate validation vulnerability in HAVELSAN Inc. Sef - AI Chatbot Platform allows Adversary in the Middle (AiTM). This issue affects Sef - AI Chatbot Platform: before 2.1. NOTE: The vendor was contacted and it was learned that the product is not supported.

CVE-2026-80337 Média · 5.3 CWE-862 02/10/2026

Unauthorized Cross-Chatbot Tool Invocation in HAVELSAN's Sef - AI Chatbot Platform

Missing Authorization vulnerability in HAVELSAN Inc. Sef - AI Chatbot Platform allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Sef - AI Chatbot Platform: before 2.1. NOTE: The vendor was contacted and it was learned that the product is not supported.

CVE-2026-77707 Média · 5.9 CWE-295 24/09/2026

TLS Certificate Validation Disabled for Keycloak Connections in HAVELSAN's Liman Render Engine

Improper certificate validation vulnerability in HAVELSAN Inc. Liman Render Engine allows Adversary in the Middle (AiTM). This issue affects Liman Render Engine: from 1.0 before 1.2-75.

CVE-2026-77703 Média · 5.9 CWE-322 24/09/2026

SSH Host Key Verification Bypass in HAVELSAN's Liman Render Engine

Key exchange without entity authentication vulnerability in HAVELSAN Inc. Liman Render Engine allows Adversary in the Middle (AiTM). This issue affects Liman Render Engine: from 1.0 before 1.2-75.

CVE-2026-19532 Média · 5.3 CWE-22 24/09/2026

Path Traversal in HAVELSAN's Liman MYS

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in HAVELSAN Inc. Liman MYS allows Path Traversal. This issue affects Liman MYS: from 2.3.2 before 2.3.4-1124.

CVE-2026-18650 Alta · 8.8 CWE-862 04/08/2026

Missing Authorization Leading to Root Code Execution in HAVELSAN's Liman MYS

Missing Authorization vulnerability in HAVELSAN Inc. Liman MYS allows Privilege Escalation. This issue affects Liman MYS: from 2.2.3 before 2.3.1.

CVE-2026-17070 Alta · 8.8 CWE-862 04/08/2026

Vault Credential Confusion via Authorization Bypass in HAVELSAN's Liman MYS

Missing Authorization vulnerability in HAVELSAN Inc. Liman MYS allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Liman MYS: from 2.2.3 before 2.3.1.

CVE-2026-13696 Alta · 8.8 CWE-90 07/07/2026

LDAP Injection in HAVELSAN's Liman MYS

Improper neutralization of special elements used in an LDAP query ('LDAP injection') vulnerability in HAVELSAN Inc. Liman MYS allows LDAP Injection. This issue affects Liman MYS: before release.Master.1107.

CVE-2026-11348 Alta · 8.1 CWE-347 07/07/2026

Authentication Bypass in HAVELSAN's Open Source Project Liman MYS

Improper verification of cryptographic signature vulnerability in HAVELSAN Inc. Liman MYS allows Fake the Source of Data. This issue affects Liman MYS: before release.Master.1107.

CVE-2026-11340 Alta · 8.3 CWE-862 07/07/2026

Authorization Bypass in HAVELSAN's Open Source Project Liman MYS

Missing Authorization vulnerability in HAVELSAN Inc. Liman MYS allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Liman MYS: before release.Master.1107.