HAVELSAN Inc.

Products

ProductCVEsExploitedLatest
Liman MYS8–Oct 28, 2026
Sef - AI Chatbot Platform4–Oct 2, 2026
Liman Render Engine2–Sep 24, 2026
Dialogue1–Apr 29, 2024

Exploited and recent CVEs

  • CVE-2026-105457 Medium 6.5 Authenticated Arbitrary Local File Read via Path Traversal in HAVELSAN's Liman MYS 0.4%
  • CVE-2026-94380 High 8.1 Host Header Injection in HAVELSAN's Liman MYS 0.3%
  • CVE-2026-80298 High 8.8 SQL Injection in HAVELSAN's Sef - AI Chatbot Platform 0.3%
  • CVE-2026-80443 High 7.4 Insecure TLS Certificate Validation in API Tool Runner in HAVELSAN's Sef - AI Chatbot Platform 0.2%
  • CVE-2026-80337 Medium 5.3 Unauthorized Cross-Chatbot Tool Invocation in HAVELSAN's Sef - AI Chatbot Platform 0.2%
  • CVE-2026-80464 Medium 4.9 API Tool Runner SSRF in HAVELSAN's Sef - AI Chatbot Platform 0.3%
  • CVE-2026-77707 Medium 5.9 TLS Certificate Validation Disabled for Keycloak Connections in HAVELSAN's Liman Render Engine 0.1%
  • CVE-2026-77703 Medium 5.9 SSH Host Key Verification Bypass in HAVELSAN's Liman Render Engine 0.2%
  • CVE-2026-19532 Medium 5.3 Path Traversal in HAVELSAN's Liman MYS 0.3%
  • CVE-2026-18650 High 8.8 Missing Authorization Leading to Root Code Execution in HAVELSAN's Liman MYS 0.4%
  • CVE-2026-17070 High 8.8 Vault Credential Confusion via Authorization Bypass in HAVELSAN's Liman MYS 0.4%
  • CVE-2026-13696 High 8.8 LDAP Injection in HAVELSAN's Liman MYS 0.5%
  • CVE-2026-11348 High 8.1 Authentication Bypass in HAVELSAN's Open Source Project Liman MYS 0.3%
  • CVE-2026-11340 High 8.3 Authorization Bypass in HAVELSAN's Open Source Project Liman MYS 0.4%
  • CVE-2024-3375 Critical 9.4 Broken Access Control in Havelsan's Dialogue 0.5%