CVE-2026-94380

Published: Ott 26, 2026 Last Modified: Ott 26, 2026
ExploitDB:
Other exploit source:
Google Dorks:
HIGH 8,1
Attack Vector: network
Attack Complexity: low
Privileges Required: none
User Interaction: required
Scope: unchanged
Confidentiality: high
Integrity: high
Availability: none

Description

Weak Password Recovery Mechanism for Forgotten Password vulnerability in HAVELSAN Inc. Liman MYS allows Password Recovery Exploitation.

This issue affects Liman MYS: from 2.3.4-1124 before 2.3.5-1131.

640

Weak Password Recovery Mechanism for Forgotten Password

Incomplete
Common Consequences
Security Scopes Affected:
Access Control Availability Integrity Other
Potential Impacts:
Gain Privileges Or Assume Identity Dos: Resource Consumption (Other) Other
Applicable Platforms
All platforms may be affected
View CWE Details
https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1396