CVE-2026-18650

Summary

A missing authorization vulnerability in HAVELSAN Inc. Liman MYS allows privilege escalation, enabling unauthorized users to perform actions with elevated privileges.

Exploitability

Exploitation requires an authenticated user with access to the affected version of Liman MYS. The vulnerability is present in versions from 2.2.3 to 2.3.0.

Blast radius

If exploited, this vulnerability could lead to complete control over the affected system, potentially allowing attackers to execute arbitrary commands and access sensitive information.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to Liman MYS version 2.3.1 or later.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.