CVE-2026-77703

MediumCVSS 5.9

Published: 24/09/2026(UTC)Updated: 24/09/2026(UTC)Translated: 24/09/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.24%

13th percentile - higher than 13% of all known CVEs

Summary

Liman Render Engine contains a key exchange without entity authentication vulnerability, allowing an Adversary in the Middle (AiTM) attack. This issue affects versions from 1.0 before 1.2-75.

Risk Assessment

An attacker positioned in the communication path can intercept or modify exchanged data without authentication, leading to confidentiality and integrity breaches.

Recommendation

Update Liman Render Engine to version 1.2-75 or later to eliminate the vulnerability.

Other vulnerabilities in Liman Render Engine

CVE-2026-77707Medium
HAVELSAN Inc. Liman Render Engine contains an improper certificate validation vulnerability that allows an Adversary in the Middle (AiTM) attack. This issue affects versions from 1.0 before 1.2-75.

Original NVD description (English source)

Key exchange without entity authentication vulnerability in HAVELSAN Inc. Liman Render Engine allows Adversary in the Middle (AiTM). This issue affects Liman Render Engine: from 1.0 before 1.2-75.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS