HAVELSAN Inc.
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Liman MYS | 8 | – | Oct 28, 2026 |
| Sef - AI Chatbot Platform | 4 | – | Oct 2, 2026 |
| Liman Render Engine | 2 | – | Sep 24, 2026 |
| Dialogue | 1 | – | Apr 29, 2024 |
Exploited and recent CVEs
- CVE-2026-105457 Authenticated Arbitrary Local File Read via Path Traversal in HAVELSAN's Liman MYS 0.4%
- CVE-2026-94380 Host Header Injection in HAVELSAN's Liman MYS 0.3%
- CVE-2026-80298 SQL Injection in HAVELSAN's Sef - AI Chatbot Platform 0.3%
- CVE-2026-80443 Insecure TLS Certificate Validation in API Tool Runner in HAVELSAN's Sef - AI Chatbot Platform 0.2%
- CVE-2026-80337 Unauthorized Cross-Chatbot Tool Invocation in HAVELSAN's Sef - AI Chatbot Platform 0.2%
- CVE-2026-80464 API Tool Runner SSRF in HAVELSAN's Sef - AI Chatbot Platform 0.3%
- CVE-2026-77707 TLS Certificate Validation Disabled for Keycloak Connections in HAVELSAN's Liman Render Engine 0.1%
- CVE-2026-77703 SSH Host Key Verification Bypass in HAVELSAN's Liman Render Engine 0.2%
- CVE-2026-19532 Path Traversal in HAVELSAN's Liman MYS 0.3%
- CVE-2026-18650 Missing Authorization Leading to Root Code Execution in HAVELSAN's Liman MYS 0.4%
- CVE-2026-17070 Vault Credential Confusion via Authorization Bypass in HAVELSAN's Liman MYS 0.4%
- CVE-2026-13696 LDAP Injection in HAVELSAN's Liman MYS 0.5%
- CVE-2026-11348 Authentication Bypass in HAVELSAN's Open Source Project Liman MYS 0.3%
- CVE-2026-11340 Authorization Bypass in HAVELSAN's Open Source Project Liman MYS 0.4%
- CVE-2024-3375 Broken Access Control in Havelsan's Dialogue 0.5%