CVE-2026-77707

MediumCVSS 5.9

Published: 24/09/2026(UTC)Updated: 24/09/2026(UTC)Translated: 24/09/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.13%

2th percentile - higher than 2% of all known CVEs

Summary

HAVELSAN Inc. Liman Render Engine contains an improper certificate validation vulnerability that allows an Adversary in the Middle (AiTM) attack. This issue affects versions from 1.0 before 1.2-75.

Risk Assessment

A man-in-the-middle attacker can intercept or modify communications by impersonating a trusted server. This may lead to disclosure of credentials or manipulation of transmitted information.

Recommendation

Upgrade Liman Render Engine to version 1.2-75 or later. Ensure certificate validation is enabled and enforced in the configuration.

Other vulnerabilities in Liman Render Engine

CVE-2026-77703Medium
Liman Render Engine contains a key exchange without entity authentication vulnerability, allowing an Adversary in the Middle (AiTM) attack. This issue affects versions from 1.0 before 1.2-75.

Original NVD description (English source)

Improper certificate validation vulnerability in HAVELSAN Inc. Liman Render Engine allows Adversary in the Middle (AiTM). This issue affects Liman Render Engine: from 1.0 before 1.2-75.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS