Weak Password Recovery Mechanism in Liman MYS from HAVELSAN Inc.
CVE-2026-94380

8.1HIGH

Key Information:

Vendor

Havelsan Inc.

Status
Liman Mys
Vendor
CVE Published:
26 October 2026

What is CVE-2026-94380?

A vulnerability exists in HAVELSAN Inc.'s Liman MYS that allows an attacker to exploit a weak password recovery mechanism. This enables unauthorized individuals to reset user passwords and gain access to sensitive information. The affected versions range from 2.3.4-1124 prior to 2.3.5-1131, making it critical for users to update to the latest version to mitigate this risk.

Affected Version(s)

Liman MYS 2.3.4-1124 < 2.3.5-1131

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/...
government-resource

CVSS V3.1

Score:
8.1
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Eren Can Ă–ZMEN
.