Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 8

Export CSV
CVE-2026-105457

Authenticated Arbitrary Local File Read via Path Traversal in HAVELSAN's Liman MYS

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in HAVELSAN Inc. Liman MYS allows Path Traversal. This issue affects Liman MYS: before 2.3.5-1132.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Havelsan
Products
Liman Mys
CVE-2026-94380

Host Header Injection in HAVELSAN's Liman MYS

Weak Password Recovery Mechanism for Forgotten Password vulnerability in HAVELSAN Inc. Liman MYS allows Password Recovery Exploitation. This issue affects Liman MYS: from 2.3.4-1124 before 2.3.5-1131.

CVSS 3.1 · 8.1 High EPSS < 1% KEV · Not listed
Vendors
Havelsan
Products
Liman Mys
CVE-2026-19532

Path Traversal in HAVELSAN's Liman MYS

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in HAVELSAN Inc. Liman MYS allows Path Traversal. This issue affects Liman MYS: from 2.3.2 before 2.3.4-1124.

CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Havelsan
Products
Liman Mys
CVE-2026-18650

Missing Authorization Leading to Root Code Execution in HAVELSAN's Liman MYS

Missing Authorization vulnerability in HAVELSAN Inc. Liman MYS allows Privilege Escalation. This issue affects Liman MYS: from 2.2.3 before 2.3.1.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Havelsan
Products
Liman Mys
CVE-2026-17070

Vault Credential Confusion via Authorization Bypass in HAVELSAN's Liman MYS

Missing Authorization vulnerability in HAVELSAN Inc. Liman MYS allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Liman MYS: from 2.2.3 before 2.3.1.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Havelsan
Products
Liman Mys
CVE-2026-11340

Authorization Bypass in HAVELSAN's Open Source Project Liman MYS

Missing Authorization vulnerability in HAVELSAN Inc. Liman MYS allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Liman MYS: before release.Master.1107.

CVSS 3.1 · 8.3 High EPSS < 1% KEV · Not listed
Vendors
Havelsan
Products
Liman Mys
CVE-2026-11348

Authentication Bypass in HAVELSAN's Open Source Project Liman MYS

Improper verification of cryptographic signature vulnerability in HAVELSAN Inc. Liman MYS allows Fake the Source of Data. This issue affects Liman MYS: before release.Master.1107.

CVSS 3.1 · 8.1 High EPSS < 1% KEV · Not listed
Vendors
Havelsan
Products
Liman Mys
CVE-2026-13696

LDAP Injection in HAVELSAN's Liman MYS

Improper neutralization of special elements used in an LDAP query ('LDAP injection') vulnerability in HAVELSAN Inc. Liman MYS allows LDAP Injection. This issue affects Liman MYS: before release.Master.1107.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Havelsan
Products
Liman Mys