CVE-2026-80464
MediumCVSS 4.9Summary
Server-Side Request Forgery (SSRF) vulnerability in HAVELSAN Inc. Sef - AI Chatbot Platform allows Server Side Request Forgery. This issue affects Sef - AI Chatbot Platform before 2.1.
Risk Assessment
An attacker can force the server to make requests to internal or external resources, potentially leading to information disclosure or using the server as a proxy for attacks. This may compromise the security of the organization's internal infrastructure.
Recommendation
Update Sef - AI Chatbot Platform to version 2.1 or later. Additionally, consider validating and restricting outbound requests on the server side.
Other vulnerabilities in Sef - AI Chatbot Platform
See all- CVE-2026-80298High
Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in HAVELSAN Inc. Sef - AI Chatbot Platform allows SQL Injection. This issue affects Sef - AI Chatbot Platform versions before 2.1.
- CVE-2026-80443High
Improper certificate validation vulnerability in HAVELSAN Inc. Sef - AI Chatbot Platform allows Adversary in the Middle (AiTM). This issue affects versions before 2.1.
- CVE-2026-80337Medium
Missing Authorization vulnerability in HAVELSAN Inc. Sef - AI Chatbot Platform allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Sef - AI Chatbot Platform before 2.1.
Original NVD description (English source)
Server-Side request forgery (SSRF) vulnerability in HAVELSAN Inc. Sef - AI Chatbot Platform allows Server Side Request Forgery. This issue affects Sef - AI Chatbot Platform: before 2.1.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS