Havelsan vulnerabilities

We track 9 vulnerabilities in Havelsan products across 4 products. 9 are rated high or critical, and none are known to be exploited. The most recent was published on November 9, 2026.

9vulnerabilities

1critical

8high

0exploited

8.4average CVSS score

Latest Havelsan vulnerabilities

7.8 High severity
Liman Render Engine: Incorrect Permission Assignment for Critical Resource
CVE-2026-119474Nov 9, 2026Havelsan
Incorrect Permission Assignment for Critical Resource vulnerability in HAVELSAN Inc. Liman Render Engine allows Privilege Escalation. This issue affects Liman Render Engine: before 1.2-81.
8.1 High severity
Liman MYS: Weak Password Recovery Mechanism for Forgotten Password
CVE-2026-94380Oct 26, 2026Havelsan
Weak Password Recovery Mechanism for Forgotten Password vulnerability in HAVELSAN Inc. Liman MYS allows Password Recovery Exploitation. This issue affects Liman MYS: from 2.3.4-1124 before 2.3.5-1131.
8.8 High severity
Sef - AI Chatbot Platform: Improper Neutralization of Special Elements used in an SQL Command
CVE-2026-80298Oct 2, 2026Havelsan
Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in HAVELSAN Inc. Sef - AI Chatbot Platform allows SQL Injection. This issue affects Sef - AI Chatbot Platform: before 2.1. NOTE: The vendor was contacted and it
7.4 High severity
Sef - AI Chatbot Platform: Improper Certificate Validation
CVE-2026-80443Oct 2, 2026Havelsan
Improper certificate validation vulnerability in HAVELSAN Inc. Sef - AI Chatbot Platform allows Adversary in the Middle (AiTM). This issue affects Sef - AI Chatbot Platform: before 2.1. NOTE: The vendor was contacted and it was learned that the product is not
8.8 High severity
Liman MYS: Missing Authorization
CVE-2026-17070Aug 4, 2026Havelsan
Missing Authorization vulnerability in HAVELSAN Inc. Liman MYS allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Liman MYS: from 2.2.3 before 2.3.1.
8.8 High severity
Liman MYS: Improper Neutralization of Special Elements used in an LDAP Query
CVE-2026-13696Jul 7, 2026Havelsan
Improper neutralization of special elements used in an LDAP query ('LDAP injection') vulnerability in HAVELSAN Inc. Liman MYS allows LDAP Injection. This issue affects Liman MYS: before release.Master.1107.
8.1 High severity
Liman MYS: Improper Verification of Cryptographic Signature
CVE-2026-11348Jul 7, 2026Havelsan
Improper verification of cryptographic signature vulnerability in HAVELSAN Inc. Liman MYS allows Fake the Source of Data. This issue affects Liman MYS: before release.Master.1107.
8.3 High severity
Liman MYS: Missing Authorization
CVE-2026-11340Jul 7, 2026Havelsan
Missing Authorization vulnerability in HAVELSAN Inc. Liman MYS allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Liman MYS: before release.Master.1107.
9.4 Critical severity
Dialogue: Incorrect Permission Assignment for Critical Resource
CVE-2024-3375Apr 29, 2024Havelsan
Incorrect Permission Assignment for Critical Resource vulnerability in Havelsan Inc. Dialogue allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Dialogue: from v1.83 before v1.83.1 or v1.84.