CVE-2026-80298
HighCVSS 8.8Summary
Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in HAVELSAN Inc. Sef - AI Chatbot Platform allows SQL Injection. This issue affects Sef - AI Chatbot Platform versions before 2.1.
Risk Assessment
An attacker could execute arbitrary SQL commands, potentially leading to data leakage, modification, or deletion. This could compromise the confidentiality, integrity, and availability of the system.
Recommendation
Upgrade Sef - AI Chatbot Platform to version 2.1 or later, which fixes this issue.
Other vulnerabilities in Sef - AI Chatbot Platform
See all- CVE-2026-80464Medium
Server-Side Request Forgery (SSRF) vulnerability in HAVELSAN Inc. Sef - AI Chatbot Platform allows Server Side Request Forgery. This issue affects Sef - AI Chatbot Platform before 2.1.
- CVE-2026-80443High
Improper certificate validation vulnerability in HAVELSAN Inc. Sef - AI Chatbot Platform allows Adversary in the Middle (AiTM). This issue affects versions before 2.1.
- CVE-2026-80337Medium
Missing Authorization vulnerability in HAVELSAN Inc. Sef - AI Chatbot Platform allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Sef - AI Chatbot Platform before 2.1.
Original NVD description (English source)
Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in HAVELSAN Inc. Sef - AI Chatbot Platform allows SQL Injection. This issue affects Sef - AI Chatbot Platform: before 2.1.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS