Live › vulnerability › CVE-2026-94380
Go to dashboardHAVELSAN Liman MYS versions from 2.3.4-1124 before 2.3.5-1131 have a weak forgotten-password recovery mechanism. The sources say an attacker can exploit the password recovery flow, which NVD scores 8.1 (high) in CVSS.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-26 12:29 UTC. All times on this page are UTC.
Organizations running HAVELSAN Liman MYS in the affected version range, from 2.3.4-1124 before 2.3.5-1131. The sources do not say which deployment configurations or roles are needed to reach the recovery flow. Installations already on 2.3.5-1131 or later are not affected.
No product ranges from the sources yet.
2.3.5-1131; versions from 2.3.4-1124 up to but not including 2.3.5-1131 are affected.2.3.5-1131 or later.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Weak Password Recovery Mechanism for Forgotten Password vulnerability in HAVELSAN Inc. Liman MYS allows Password Recovery Exploitation.
This issue affects Liman MYS: from 2.3.4-1124 before 2.3.5-1131.
This page as .md · .json · in your agent: get_signal("CVE-2026-94380")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.