Skip to content
Threat Feed
Subscribe

Vendor

HAVELSAN Inc.

3 briefs RSS
high advisory

CVE-2026-13696: HAVELSAN Liman MYS LDAP Injection Vulnerability

A high-severity LDAP injection vulnerability, tracked as CVE-2026-13696 with a CVSS v3.1 base score of 8.8, affects HAVELSAN Inc.'s Liman MYS versions prior to release.Master.1107, allowing attackers to bypass authentication or exfiltrate sensitive data via improper neutralization of special characters in LDAP queries.

Liman MYS: before release.Master.1107 vulnerability ldap-injection web-application
1c
high threat

CVE-2026-11348: HAVELSAN Liman MYS Cryptographic Signature Bypass Vulnerability

A critical improper verification of cryptographic signature vulnerability, tracked as CVE-2026-11348, in HAVELSAN Inc.'s Liman MYS product allows an unauthenticated attacker to fake the source of data, leading to potential data integrity compromise.

exploited Liman MYS: < release.Master.1107 vulnerability cryptographic-vulnerability liman-mys
1c
high advisory

CVE-2026-11340 — Missing Authorization in HAVELSAN Liman MYS

A missing authorization vulnerability (CVE-2026-11340) in HAVELSAN Inc. Liman MYS versions prior to release.Master.1107 allows an attacker with low privileges to access functionality not properly constrained by ACLs, leading to high impact on integrity and availability.

Liman MYS vulnerability web-application missing-authorization cve
1t 1c