{"id":"CVE-2026-94380","kind":"vulnerability","aliases":["CVE-2026-94380"],"related":[],"title":"HAVELSAN Liman MYS: weak password recovery lets attackers reset accounts","description":"Weak Password Recovery Mechanism for Forgotten Password vulnerability in HAVELSAN Inc. Liman MYS allows Password Recovery Exploitation.\n\nThis issue affects Liman MYS: from 2.3.4-1124 before 2.3.5-1131.","summary":"HAVELSAN Liman MYS versions from 2.3.4-1124 before 2.3.5-1131 have a weak forgotten-password recovery mechanism. The sources say an attacker can exploit the password recovery flow, which NVD scores 8.1 (high) in CVSS.","severity":"high","cvss":8.1,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["havelsan","liman-mys","other","self-hosted"],"not_affected_if":["version-2.3.5-1131-or-later"],"how_to_check":"- Check the installed Liman MYS version against `2.3.5-1131`; versions from `2.3.4-1124` up to but not including `2.3.5-1131` are affected.\n- unknown for other checks; the sources do not describe specific settings or files.","fix":"- Upgrade Liman MYS to `2.3.5-1131` or later.\n- unknown for any interim mitigation; the sources do not say.","status":"open","published_at":"2026-10-26T12:17:08+00:00","first_seen_at":"2026-10-26T12:29:53+00:00","triaged_at":"2026-10-26T12:31:40+00:00","updated_at":"2026-10-26T12:31:40+00:00","category":"other","confidence":0.5,"triage":{"at":"2026-10-26T12:31:40Z","model":"claude-haiku-5-5","output":{"fix":"- Upgrade Liman MYS to `2.3.5-1131` or later.\n- unknown for any interim mitigation; the sources do not say.","reach":"unknown","title":"HAVELSAN Liman MYS: weak password recovery lets attackers reset accounts","impact":"high","summary":"HAVELSAN Liman MYS versions from 2.3.4-1124 before 2.3.5-1131 have a weak forgotten-password recovery mechanism. The sources say an attacker can exploit the password recovery flow, which NVD scores 8.1 (high) in CVSS.","category":"other","nicknames":[],"who_cares":["liman-mys","havelsan","self-hosted"],"confidence":0.5,"needs_auth":"unknown","worst_case":"attacker resets passwords and takes over user accounts","analyst_note":"Find the HAVELSAN advisory or NVD detail for CVE-2026-94380 to confirm the attack path, whether authentication is needed, and any workaround before upgrade.","how_to_check":"- Check the installed Liman MYS version against `2.3.5-1131`; versions from `2.3.4-1124` up to but not including `2.3.5-1131` are affected.\n- unknown for other checks; the sources do not describe specific settings or files.","needs_analyst":true,"not_affected_if":["version-2.3.5-1131-or-later"],"who_is_affected":"Organizations running HAVELSAN Liman MYS in the affected version range, from 2.3.4-1124 before 2.3.5-1131. The sources do not say which deployment configurations or roles are needed to reach the recovery flow. Installations already on 2.3.5-1131 or later are not affected.","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000642,"input_tokens":3311,"output_tokens":621,"severity_before":"high"},"analyst_status":null,"analyst_note":null,"search":"'-1124':31B,85C '-1131':34B,88C '-2026':12A,15A '-94380':13A,16A '2.3.4':30B,84C '2.3.5':33B,87C '8.1':57B 'account':10A 'affect':80C 'allow':74C 'attack':8A,47B 'cve':11A,14A 'cvss':60B 'exploit':49B,77C 'flow':53B 'forgotten':39B,66C 'forgotten-password':38B 'havelsan':1A,17B,25B,70C 'high':58B 'host':24B 'inc':71C 'issu':79C 'let':7A 'liman':2A,19B,26B,72C,81C 'liman-mi':18B 'mechan':42B,64C 'mys':3A,20B,27B,73C,82C 'nvd':55B 'password':5A,40B,51B,62C,67C,75C 'recoveri':6A,41B,52B,63C,76C 'reset':9A 'say':45B 'score':56B 'self':23B 'self-host':22B 'sourc':44B 'version':28B 'vulner':68C 'weak':4A,37B,61C","nicknames":[],"mitigations":[],"who_affected":"Organizations running HAVELSAN Liman MYS in the affected version range, from 2.3.4-1124 before 2.3.5-1131. The sources do not say which deployment configurations or roles are needed to reach the recovery flow. Installations already on 2.3.5-1131 or later are not affected.","tier":"B","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-26T12:17:08+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N","cvss_by":"iletisim@usom.gov.tr","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-94380","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-94380","severity":null,"published_at":"2026-10-26T12:17:08+00:00","modified_at":"2026-10-26T12:17:08+00:00","first_seen_at":"2026-10-26T12:29:53+00:00","fetched_at":"2026-10-26T12:29:53+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}