CVE-2026-80337
MediumCVSS 5.3Summary
Missing Authorization vulnerability in HAVELSAN Inc. Sef - AI Chatbot Platform allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Sef - AI Chatbot Platform before 2.1.
Risk Assessment
An attacker can access functionality or data they are not authorized for, potentially leading to unauthorized actions or information disclosure. This may compromise the confidentiality and integrity of the system.
Recommendation
Update Sef - AI Chatbot Platform to version 2.1 or later. Verify the correctness of access control mechanisms in the application.
Other vulnerabilities in Sef - AI Chatbot Platform
See all- CVE-2026-80298High
Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in HAVELSAN Inc. Sef - AI Chatbot Platform allows SQL Injection. This issue affects Sef - AI Chatbot Platform versions before 2.1.
- CVE-2026-80464Medium
Server-Side Request Forgery (SSRF) vulnerability in HAVELSAN Inc. Sef - AI Chatbot Platform allows Server Side Request Forgery. This issue affects Sef - AI Chatbot Platform before 2.1.
- CVE-2026-80443High
Improper certificate validation vulnerability in HAVELSAN Inc. Sef - AI Chatbot Platform allows Adversary in the Middle (AiTM). This issue affects versions before 2.1.
Original NVD description (English source)
Missing Authorization vulnerability in HAVELSAN Inc. Sef - AI Chatbot Platform allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Sef - AI Chatbot Platform: before 2.1.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS