CVE-2026-17070

Summary

This vulnerability allows unauthorized access to functionality not properly constrained by ACLs, enabling potential data breaches or system compromises.

Exploitability

Exploitation requires access to the affected Liman MYS version and knowledge of the missing authorization checks; it is moderately difficult.

Blast radius

If exploited, this could lead to significant data loss or system compromise in real-world scenarios affecting HAVELSAN Inc. clients.

Prioritized remediation

Upgrade to Liman MYS version 2.3.1 or later to address the missing authorization vulnerability.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.