CVE-2026-17070: Vault Credential Confusion via Authorization Bypass in HAVELSAN's Liman MYS
Published Aug 4, 2026
·Updated
Missing Authorization vulnerability in HAVELSAN Inc. Liman MYS allows Accessing Functionality Not Properly Constrained by ACLs.
This issue affects Liman MYS: from 2.2.3 before 2.3.1.
Affected Software
1 affected component
HAVELSAN Liman MYS>=2.2.3<2.3.1
Event History
Aug 4, 2026
CVE Published
via MITRE·01:45 PM
Data Sourced
via MITRE·01:45 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·02:16 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2026-17070?
CVE-2026-17070 has a severity rating of high with a score of 8.8.
2
How do I fix CVE-2026-17070?
To fix CVE-2026-17070, upgrade HAVELSAN Liman MYS to version 2.3.1 or later.
3
What type of vulnerability is CVE-2026-17070?
CVE-2026-17070 is a missing authorization vulnerability that allows access to functionality not properly constrained by ACLs.
4
Which versions of HAVELSAN Liman MYS are affected by CVE-2026-17070?
CVE-2026-17070 affects HAVELSAN Liman MYS versions from 2.2.3 before 2.3.1.
5
What are the potential impacts of CVE-2026-17070?
The potential impacts of CVE-2026-17070 include unauthorized access to sensitive features and data within HAVELSAN Liman MYS.