Liman MYS vulnerabilities

5 known vulnerabilities in Liman MYS from Havelsan. 5 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.1 High severity

  Liman MYS: Weak Password Recovery Mechanism for Forgotten Password

  CVE-2026-94380Oct 26, 2026Havelsan

  Weak Password Recovery Mechanism for Forgotten Password vulnerability in HAVELSAN Inc. Liman MYS allows Password Recovery Exploitation. This issue affects Liman MYS: from 2.3.4-1124 before 2.3.5-1131.

• 8.8 High severity

  Liman MYS: Missing Authorization

  CVE-2026-17070Aug 4, 2026Havelsan

  Missing Authorization vulnerability in HAVELSAN Inc. Liman MYS allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Liman MYS: from 2.2.3 before 2.3.1.

• 8.8 High severity

  Liman MYS: Improper Neutralization of Special Elements used in an LDAP Query

  CVE-2026-13696Jul 7, 2026Havelsan

  Improper neutralization of special elements used in an LDAP query ('LDAP injection') vulnerability in HAVELSAN Inc. Liman MYS allows LDAP Injection. This issue affects Liman MYS: before release.Master.1107.

• 8.1 High severity

  Liman MYS: Improper Verification of Cryptographic Signature

  CVE-2026-11348Jul 7, 2026Havelsan

  Improper verification of cryptographic signature vulnerability in HAVELSAN Inc. Liman MYS allows Fake the Source of Data. This issue affects Liman MYS: before release.Master.1107.

• 8.3 High severity

  Liman MYS: Missing Authorization

  CVE-2026-11340Jul 7, 2026Havelsan

  Missing Authorization vulnerability in HAVELSAN Inc. Liman MYS allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Liman MYS: before release.Master.1107.