Cpe:2.3:a:havelsan:liman_render_engine:*:*:*:*:*:*:*:* - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/cpes/cpe2.3ahavelsanliman_render_engine/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioMon, 09 Nov 2026 17:49:37 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgHAVELSAN Liman Render Engine: Privilege escalation (CVE-2026-119474)https://feed.craftedsignal.io/briefs/2026-11-liman-render-privesc/Mon, 09 Nov 2026 17:49:37 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-11-liman-render-privesc/An incorrect permission assignment vulnerability in HAVELSAN Liman Render Engine versions prior to 1.2-81 allows an attacker to gain elevated privileges.The HAVELSAN Liman Render Engine contains an incorrect permission assignment vulnerability (CVE-2026-119474) that permits local privilege escalation. This vulnerability allows an attacker to gain unauthorized elevated rights on a system where the affected software is installed. The vulnerability affects all versions of Liman Render Engine prior to 1.2-81.

Impact

Successful exploitation of this vulnerability allows an attacker to escalate privileges on the host system, potentially leading to full system compromise depending on the context in which the service or application is running.

Recommendation

  • Upgrade to HAVELSAN Liman Render Engine version 1.2-81 or later to remediate the permission assignment flaw.
  • Review local user and service account permissions on systems hosting Liman Render Engine to ensure the principle of least privilege is enforced until the patch can be applied.
  • Audit logs for unexpected process execution from accounts associated with the Liman Render service.
]]>highadvisory