CVE-2026-17070

HighCVSS 8.8

Published: 04/08/2026(UTC)Updated: 26/08/2026(UTC)Translated: 05/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.29%

21th percentile - higher than 21% of all known CVEs

Summary

Liman MYS from 2.2.3 before 2.3.1 has a missing authorization vulnerability allowing access to functionality not properly constrained by ACLs.

Risk Assessment

An attacker can access functions they should not have permissions for, potentially leading to security breaches.

Recommendation

Update Liman MYS to version 2.3.1 or later.

Other vulnerabilities in Liman MYS

See all

CVE-2026-13696High
An LDAP injection vulnerability in HAVELSAN Inc. Liman MYS allows an attacker to manipulate LDAP queries due to improper neutralization of special elements. The issue affects versions before release.Master.1107.
CVE-2026-11348High
An improper verification of cryptographic signature vulnerability in HAVELSAN Inc. Liman MYS allows fake the source of data. This issue affects Liman MYS versions before release.Master.1107.
CVE-2026-11340High
A missing authorization vulnerability in HAVELSAN Inc. Liman MYS allows accessing functionality not properly constrained by ACLs. This issue affects versions before release.Master.1107.
CVE-2026-18650High
Liman MYS from 2.2.3 before 2.3.1 has a missing authorization vulnerability allowing privilege escalation.

Original NVD description (English source)

Missing Authorization vulnerability in HAVELSAN Inc. Liman MYS allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Liman MYS: from 2.2.3 before 2.3.1.