CVE-2026-13696

HighCVSS 8.8

Published: 07/07/2026(UTC)Updated: 07/07/2026(UTC)Translated: 08/07/2026(UTC)NVD NIST

Summary

An LDAP injection vulnerability in HAVELSAN Inc. Liman MYS allows an attacker to manipulate LDAP queries due to improper neutralization of special elements. The issue affects versions before release.Master.1107.

Risk Assessment

An attacker could exploit this vulnerability to gain unauthorized access to LDAP directory data, potentially leading to sensitive information disclosure or privilege escalation within the organization.

Recommendation

Immediately upgrade Liman MYS to version release.Master.1107 or later, which includes a fix that eliminates the LDAP injection vulnerability.

Original NVD description (English source)

Improper neutralization of special elements used in an LDAP query ('LDAP injection') vulnerability in HAVELSAN Inc. Liman MYS allows LDAP Injection. This issue affects Liman MYS: before release.Master.1107.