CVE-2026-18650
HighCVSS 8.8Exploitation Probability (EPSS)
Low risk14th percentile - higher than 14% of all known CVEs
Summary
Liman MYS from 2.2.3 before 2.3.1 has a missing authorization vulnerability allowing privilege escalation.
Risk Assessment
An attacker can gain elevated privileges, potentially leading to unauthorized access to data and functions.
Recommendation
Update Liman MYS to version 2.3.1 or later.
Other vulnerabilities in Liman MYS
See all- CVE-2026-13696High
An LDAP injection vulnerability in HAVELSAN Inc. Liman MYS allows an attacker to manipulate LDAP queries due to improper neutralization of special elements. The issue affects versions before release.Master.1107.
- CVE-2026-11348High
An improper verification of cryptographic signature vulnerability in HAVELSAN Inc. Liman MYS allows fake the source of data. This issue affects Liman MYS versions before release.Master.1107.
- CVE-2026-11340High
A missing authorization vulnerability in HAVELSAN Inc. Liman MYS allows accessing functionality not properly constrained by ACLs. This issue affects versions before release.Master.1107.
- CVE-2026-17070High
Liman MYS from 2.2.3 before 2.3.1 has a missing authorization vulnerability allowing access to functionality not properly constrained by ACLs.
Original NVD description (English source)
Missing Authorization vulnerability in HAVELSAN Inc. Liman MYS allows Privilege Escalation. This issue affects Liman MYS: from 2.2.3 before 2.3.1.