CVE-2026-11348

HIGH

Authentication Bypass in HAVELSAN's Open Source Project Liman MYS

Title source: cna

Description

Improper verification of cryptographic signature vulnerability in HAVELSAN Inc. Liman MYS allows Fake the Source of Data. This issue affects Liman MYS: before release.Master.1107.

References (1)

Core 1

Core References

Government Resource government-resource

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0504

Scores

CVSS v3 8.1

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact total

Details

CWE

CWE-347

Status published

Products (1)

HAVELSAN Inc./Liman MYS < release.master.1107

Published Jul 07, 2026

Tracked Since Jul 07, 2026