Improper Access Control in HAVELSAN Inc. Geographic Tracking System
CVE-2026-6209

9.1CRITICAL

Key Information:

Vendor

Havelsan Inc.

Status
Geographic Tracking System
Vendor
CVE Published:
5 June 2026

What is CVE-2026-6209?

The Geographic Tracking System developed by HAVELSAN Inc. is susceptible to an improper access control vulnerability, which allows unauthorized access to functionality not properly constrained by access control lists (ACLs). This flaw can potentially expose sensitive data and allow malicious users to exploit the system before v0.0.2, thus highlighting the importance of implementing robust access control measures to safeguard user data and maintain system integrity.

Affected Version(s)

Geographic Tracking System 0

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/...
government-resource

CVSS V3.1

Score:
9.1
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Raif Berkay DİNÇEL
.