Improper Certificate Validation in HAVELSAN Liman Render Engine
CVE-2026-77707

5.9MEDIUM

Key Information:

Vendor

Havelsan Inc.

Status
Liman Render Engine
Vendor
CVE Published:
24 September 2026

What is CVE-2026-77707?

The Liman Render Engine developed by HAVELSAN Inc. is vulnerable due to improper certificate validation. This allows adversaries to launch Adversary in the Middle (AiTM) attacks by intercepting communications and potentially manipulating data. The vulnerability affects versions from 1.0 up to, but not including, 1.2-75, exposing users to significant cybersecurity risks.

Affected Version(s)

Liman Render Engine 1.0 < 1.2-75

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/...
government-resource

CVSS V3.1

Score:
5.9
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Efe KIRBAĹž
.