CVE-2026-80443
HighCVSS 7.4Summary
Improper certificate validation vulnerability in HAVELSAN Inc. Sef - AI Chatbot Platform allows Adversary in the Middle (AiTM). This issue affects versions before 2.1.
Risk Assessment
An attacker can intercept and modify communication between the user and the chatbot, potentially leading to data theft or manipulation of responses.
Recommendation
Update Sef - AI Chatbot Platform to version 2.1 or later, which includes the fix.
Other vulnerabilities in Sef - AI Chatbot Platform
See all- CVE-2026-80298High
Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in HAVELSAN Inc. Sef - AI Chatbot Platform allows SQL Injection. This issue affects Sef - AI Chatbot Platform versions before 2.1.
- CVE-2026-80464Medium
Server-Side Request Forgery (SSRF) vulnerability in HAVELSAN Inc. Sef - AI Chatbot Platform allows Server Side Request Forgery. This issue affects Sef - AI Chatbot Platform before 2.1.
- CVE-2026-80337Medium
Missing Authorization vulnerability in HAVELSAN Inc. Sef - AI Chatbot Platform allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Sef - AI Chatbot Platform before 2.1.
Original NVD description (English source)
Improper certificate validation vulnerability in HAVELSAN Inc. Sef - AI Chatbot Platform allows Adversary in the Middle (AiTM). This issue affects Sef - AI Chatbot Platform: before 2.1.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS