CVE-2026-105457: Authenticated Arbitrary Local File Read via Path Traversal in HAVELSAN's Liman MYS
Published Oct 28, 2026
·Updated
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in HAVELSAN Inc. Liman MYS allows Path Traversal.
This issue affects Liman MYS: before 2.3.5-1132.
Affected Software
1 affected component
HAVELSAN Liman MYS<2.3.5-1132
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
HAVELSAN Liman MYSto a version that resolves this vulnerability.Fixed in 2.3.5-1132
Event History
Oct 28, 2026
CVE Published
via MITRE·09:35 AM
Data Sourced
via MITRE·09:35 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Which deployments are affected?
HAVELSAN Liman MYS versions before 2.3.5-1132 are affected.
2
What access does an attacker need to exploit this issue?
The vulnerability requires network access and low-level authenticated privileges. No user interaction is required.
3
What could a successful attacker do?
A successful path traversal attack can result in arbitrary local file read and high confidentiality impact. The provided data does not indicate integrity or availability impact.