HAVELSAN Inc. has 9 CVEs on record. Disclosure cadence is accelerating: 9 in the last 90 days against 0 in the 90 before. The busiest recent month was October 2026 with 6. The median CVSS is 5.9 (medium). None have a confirmed exploitation report. Most affected products: Sef - AI Chatbot Platform (4), Liman MYS (3), Liman Render Engine (2).
CVEs per month
Last 12 months, by publish date
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 5.9
- Publish → KEV
- —
- Last 90 days
- 9 prev 0
Products
- Sef - AI Chatbot Platform 4
- Liman MYS 3
- Liman Render Engine 2
Worst active — by depth score
CVE-2026-80298High· 8.8Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in HAVELSAN Inc48CVE-2026-94380High· 8.1Host Header Injection in HAVELSAN's Liman MYS45CVE-2026-80443High· 7.4Improper certificate validation vulnerability in HAVELSAN Inc41CVE-2026-105457Medium· 6.5Authenticated Arbitrary Local File Read via Path Traversal in HAVELSAN's Liman MYS36CVE-2026-77707Medium· 5.9Improper certificate validation vulnerability in HAVELSAN Inc32
HAVELSAN Inc. vulnerabilities
CVEs affecting HAVELSAN Inc., newest first. Open any entry for full detail, references, and exploit status.
9 CVEsRSS
CVE-2026-105457Medium· 6.5Authenticated Arbitrary Local File Read via Path Traversal in HAVELSAN's Liman MYS
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in HAVELSAN Inc. Liman MYS allows Path Traversal. This issue affects Liman MYS: before 2.3.5-1132.
CVE-2026-94380High· 8.1Host Header Injection in HAVELSAN's Liman MYS
Weak Password Recovery Mechanism for Forgotten Password vulnerability in HAVELSAN Inc. Liman MYS allows Password Recovery Exploitation. This issue affects Liman MYS: from 2.3.4-1124 before 2.3.5-1131.
CVE-2026-80298High· 8.8Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in HAVELSAN Inc
Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in HAVELSAN Inc. Sef - AI Chatbot Platform allows SQL Injection. This issue affects Sef - AI Chatbot Platform: before 2.1. NOTE: The vend…
CVE-2026-80464Medium· 4.9Server-Side request forgery (SSRF) vulnerability in HAVELSAN Inc
Server-Side request forgery (SSRF) vulnerability in HAVELSAN Inc. Sef - AI Chatbot Platform allows Server Side Request Forgery. This issue affects Sef - AI Chatbot Platform: before 2.1. NOTE: The vendor was contacted and it was learned …
CVE-2026-80337Medium· 5.3Missing Authorization vulnerability in HAVELSAN Inc
Missing Authorization vulnerability in HAVELSAN Inc. Sef - AI Chatbot Platform allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Sef - AI Chatbot Platform: before 2.1. NOTE: The vendor was contacted and…
CVE-2026-80443High· 7.4Improper certificate validation vulnerability in HAVELSAN Inc
Improper certificate validation vulnerability in HAVELSAN Inc. Sef - AI Chatbot Platform allows Adversary in the Middle (AiTM). This issue affects Sef - AI Chatbot Platform: before 2.1. NOTE: The vendor was contacted and it was learned …
CVE-2026-77707Medium· 5.9Improper certificate validation vulnerability in HAVELSAN Inc
Improper certificate validation vulnerability in HAVELSAN Inc. Liman Render Engine allows Adversary in the Middle (AiTM). This issue affects Liman Render Engine: from 1.0 before 1.2-75.
CVE-2026-77703Medium· 5.9Key exchange without entity authentication vulnerability in HAVELSAN Inc
Key exchange without entity authentication vulnerability in HAVELSAN Inc. Liman Render Engine allows Adversary in the Middle (AiTM). This issue affects Liman Render Engine: from 1.0 before 1.2-75.
CVE-2026-19532Medium· 5.3Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in HAVELSAN Inc
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in HAVELSAN Inc. Liman MYS allows Path Traversal. This issue affects Liman MYS: from 2.3.2 before 2.3.4-1124.