CVE-2026-13696
HighCVSS 8.8Summary
An LDAP injection vulnerability in HAVELSAN Inc. Liman MYS allows an attacker to manipulate LDAP queries due to improper neutralization of special elements. The issue affects versions before release.Master.1107.
Risk Assessment
An attacker could exploit this vulnerability to gain unauthorized access to LDAP directory data, potentially leading to sensitive information disclosure or privilege escalation within the organization.
Recommendation
Immediately upgrade Liman MYS to version release.Master.1107 or later, which includes a fix that eliminates the LDAP injection vulnerability.
Other vulnerabilities in Liman MYS
See all- CVE-2026-11348High
An improper verification of cryptographic signature vulnerability in HAVELSAN Inc. Liman MYS allows fake the source of data. This issue affects Liman MYS versions before release.Master.1107.
- CVE-2026-11340High
A missing authorization vulnerability in HAVELSAN Inc. Liman MYS allows accessing functionality not properly constrained by ACLs. This issue affects versions before release.Master.1107.
- CVE-2026-19532Medium
An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in HAVELSAN Inc. Liman MYS allows Path Traversal. This issue affects Liman MYS from 2.3.2 before 2.3.4-1124.
- CVE-2026-18650High
Liman MYS from 2.2.3 before 2.3.1 has a missing authorization vulnerability allowing privilege escalation.
- CVE-2026-17070High
Liman MYS from 2.2.3 before 2.3.1 has a missing authorization vulnerability allowing access to functionality not properly constrained by ACLs.
Original NVD description (English source)
Improper neutralization of special elements used in an LDAP query ('LDAP injection') vulnerability in HAVELSAN Inc. Liman MYS allows LDAP Injection. This issue affects Liman MYS: before release.Master.1107.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS