{"id":"CVE-2026-94380","revision":"329ee9d64692419c8bbd94ec9ba669cd","records":[{"revision":"329ee9d64692419c8bbd94ec9ba669cd","observedAt":"2026-10-26T15:35:30.984+00:00","statement":{"source":"cve-program","id":"CVE-2026-94380","aliases":[],"title":"Host Header Injection in HAVELSAN's Liman MYS","description":"Weak Password Recovery Mechanism for Forgotten Password vulnerability in HAVELSAN Inc. Liman MYS allows Password Recovery Exploitation.\n\nThis issue affects Liman MYS: from 2.3.4-1124 before 2.3.5-1131.","state":0,"publishedAt":"2026-10-26T11:15:45.141+00:00","modifiedAt":"2026-10-26T14:35:18.248+00:00","affected":[{"ecosystem":"Vendor product","name":"Liman MYS","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"HAVELSAN Inc.\",\n                    \"product\": \"Liman MYS\",\n                    \"versions\": [\n                        {\n                            \"status\": \"affected\",\n                            \"version\": \"2.3.4-1124\",\n                            \"lessThan\": \"2.3.5-1131\",\n                            \"versionType\": \"semver\"\n                        }\n                    ],\n                    \"defaultStatus\": \"unaffected\"\n                }"}],"metrics":[{"system":"CVSS 3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N","score":8.1,"severity":"HIGH"}],"references":["https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1396"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-94380","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-94380","identifiers":["CVE-2026-94380"]},"retained":false,"historicalAffected":[]}],"coverage":[]}