CVE-2026-17070highCWE-862

CVE-2026-17070: falha de alta gravidade em HAVELSAN Inc. Liman MYS

Vault Credential Confusion via Authorization Bypass in HAVELSAN's Liman MYS

Publicada em

Seguir esta CVE+ Monitorar Liman MYS

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 8.8epss 0.4%
Missing Authorization vulnerability in HAVELSAN Inc. Liman MYS allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Liman MYS: from 2.2.3 before 2.3.1.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Produtos afetados
HAVELSAN Inc. · Liman MYS
CVEs relacionadas — HAVELSAN Inc. Liman MYS

No mesmo produto, das mais perigosas para as menos.

CVE-2026-13696HIGHLDAP Injection in HAVELSAN's Liman MYSEPSS 0.5%CVE-2026-105457MEDIUMAuthenticated Arbitrary Local File Read via Path Traversal in HAVELSAN's Liman MYSEPSS 0.4%CVE-2026-18650HIGHMissing Authorization Leading to Root Code Execution in HAVELSAN's Liman MYSEPSS 0.4%CVE-2026-11340HIGHAuthorization Bypass in HAVELSAN's Open Source Project Liman MYSEPSS 0.4%CVE-2026-94380HIGHHost Header Injection in HAVELSAN's Liman MYSEPSS 0.3%CVE-2026-19532MEDIUMPath Traversal in HAVELSAN's Liman MYSEPSS 0.3%