CVE-2026-11340

HIGH

Authorization Bypass in HAVELSAN's Open Source Project Liman MYS

Title source: cna

Description

Missing Authorization vulnerability in HAVELSAN Inc. Liman MYS allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Liman MYS: before release.Master.1107.

References (1)

Core 1

Core References

Government Resource government-resource

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0504

Scores

CVSS v3 8.3

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-862

Status published

Products (1)

HAVELSAN Inc./Liman MYS < release.master.1107

Published Jul 07, 2026

Tracked Since Jul 07, 2026