CVE-2026-94380

CVSS 8.1 (high) · published 2026-10-26

Weak Password Recovery Mechanism for Forgotten Password vulnerability in HAVELSAN Inc. Liman MYS allows Password Recovery Exploitation. This issue affects Liman MYS: from 2.3.4-1124 before 2.3.5-1131.

Weakness: CWE-640

Source: NVD CVE-2026-94380

References

• https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1396

Check your software

Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.