{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/cpes/cpe2.3ahavelsanliman_render_engine/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:havelsan:liman_render_engine:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":7.8,"id":"CVE-2026-119474"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["Liman Render Engine (\u003c 1.2-81)"],"_cs_severities":["high"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["HAVELSAN"],"content_html":"\u003cp\u003eThe HAVELSAN Liman Render Engine contains an incorrect permission assignment vulnerability (CVE-2026-119474) that permits local privilege escalation. This vulnerability allows an attacker to gain unauthorized elevated rights on a system where the affected software is installed. The vulnerability affects all versions of Liman Render Engine prior to 1.2-81.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation of this vulnerability allows an attacker to escalate privileges on the host system, potentially leading to full system compromise depending on the context in which the service or application is running.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpgrade to HAVELSAN Liman Render Engine version 1.2-81 or later to remediate the permission assignment flaw.\u003c/li\u003e\n\u003cli\u003eReview local user and service account permissions on systems hosting Liman Render Engine to ensure the principle of least privilege is enforced until the patch can be applied.\u003c/li\u003e\n\u003cli\u003eAudit logs for unexpected process execution from accounts associated with the Liman Render service.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-11-09T17:49:37Z","date_published":"2026-11-09T17:49:37Z","id":"https://feed.craftedsignal.io/briefs/2026-11-liman-render-privesc/","summary":"An incorrect permission assignment vulnerability in HAVELSAN Liman Render Engine versions prior to 1.2-81 allows an attacker to gain elevated privileges.","title":"HAVELSAN Liman Render Engine: Privilege escalation (CVE-2026-119474)","url":"https://feed.craftedsignal.io/briefs/2026-11-liman-render-privesc/"}],"language":"en","title":"CraftedSignal Threat Feed - Cpe:2.3:a:havelsan:liman_render_engine:*:*:*:*:*:*:*:*","version":"https://jsonfeed.org/version/1.1"}