CVE-2026-80443: Insecure TLS Certificate Validation in API Tool Runner in HAVELSAN's Sef - AI Chatbot Platform

Q: Which deployments are affected?

HAVELSAN Sef - AI Chatbot Platform versions before 2.1 are affected.

Q: What does an attacker need to exploit this issue?

An attacker needs to be able to act as an adversary in the middle of the relevant network communication. The CVSS vector indicates network access is required, no privileges or user interaction are required, and exploitation has high attack complexity.

Q: What is the potential impact of successful exploitation?

Successful exploitation could compromise the confidentiality and integrity of affected communications. The provided CVSS vector indicates no direct availability impact.

Published Oct 2, 2026

Updated

Improper certificate validation vulnerability in HAVELSAN Inc. Sef - AI Chatbot Platform allows Adversary in the Middle (AiTM).

This issue affects Sef - AI Chatbot Platform: before 2.1.

Affected Software

1 affected component

HAVELSAN Sef - AI Chatbot Platform<2.1

Event History

Oct 2, 2026

CVE Published

via MITRE·09:04 AM

Data Sourced

via MITRE·09:04 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·09:16 AM

DescriptionSeverityWeakness

Frequently Asked Questions

Which deployments are affected?

HAVELSAN Sef - AI Chatbot Platform versions before 2.1 are affected.

What does an attacker need to exploit this issue?

An attacker needs to be able to act as an adversary in the middle of the relevant network communication. The CVSS vector indicates network access is required, no privileges or user interaction are required, and exploitation has high attack complexity.

What is the potential impact of successful exploitation?