What is the CVSS score of CVE-2026-18650?

CVE-2026-18650 has a CVSS 3.1 base score of 8.8 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.2%.

Which versions of Liman MYS are affected by CVE-2026-18650?

Administrators of Liman MYS risk complete platform takeover by standard users due to CVE-2026-18650, a privilege escalation flaw in versions 2.2.3 through pre-2.3.1.. A patch is available.

How to fix or mitigate CVE-2026-18650?

Within 24 hours, identify all systems running Liman MYS versions 2.2.3 through pre-2.3.1 and restrict network access to the management platform to essential personnel only. Within 7 days, upgrade all affected instances to Liman MYS 2.3.1 or later and verify patch deployment completion across the environment. Within 30 days, conduct a comprehensive audit of privileged operations performed by low-privilege users during the vulnerability window, and rotate any administrative credentials that may have been accessed.

Liman MYS CVE-2026-18650

EUVD-2026-52691 HIGH

Missing Authorization (CWE-862)

2026-08-04 TR-CERT

GHSA-c8qw-pv9p-qhf7

Authentication Bypass Privilege Escalation Liman Mys Havelsan Inc

8.8

CVSS 3.1 · Vendor: TR-CERT

Severity by source

Vendor (TR-CERT) PRIMARY

8.8 HIGH

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

vuln.today AI

8.8 HIGH

Network-reachable missing authorization flaw requiring only a low-privilege account; full C/I/A impact reflects administrator-level takeover of a server management platform.

3.1 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

4.0 AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Primary rating from Vendor (TR-CERT).

CVSS VectorVendor: TR-CERT

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Aug 04, 2026 - 15:26 vuln.today

Patch available

Aug 04, 2026 - 15:01 EUVD

CVE Published

Aug 04, 2026 - 14:02 nvd

HIGH 8.8

DescriptionCVE.org

Missing Authorization vulnerability in HAVELSAN Inc. Liman MYS allows Privilege Escalation.

This issue affects Liman MYS: from 2.2.3 before 2.3.1.

AnalysisAI

Privilege escalation in Liman MYS (HAVELSAN Inc.) versions 2.2.3 through pre-2.3.1 enables authenticated low-privilege users to gain administrator-level access via missing server-side authorization checks (CWE-862). The platform, a centralized Linux server management system used primarily in Turkish government and enterprise environments, fails to verify whether the requesting user has rights to perform privileged operations before executing them. No public exploit identified at time of analysis, but the CVSS 8.8 score with network vector and low privilege requirement makes this a high-priority patch target for any organization running the affected versions.

Technical ContextAI

Liman MYS is a centralized server management and monitoring platform developed by HAVELSAN Inc., a Turkish defense and IT company. The affected CPE is cpe:2.3:a:havelsan_inc.:liman_mys:*:*:*:*:*:*:*:* across versions 2.2.3 to pre-2.3.1. The root cause is CWE-862 (Missing Authorization): the application executes privileged administrative operations without first verifying that the requesting user possesses the necessary permissions. This is a server-side access control failure at the application layer - the system authenticates users but does not enforce role boundaries on sensitive endpoints, allowing any authenticated session to invoke administrator functionality.

RemediationAI

Upgrade Liman MYS to version 2.3.1 or later, which contains the vendor-released patch addressing the missing authorization flaw. The TR-CERT advisory is available at https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0741 and should be consulted for vendor-specific upgrade instructions. If immediate patching is not feasible, restrict network access to the Liman MYS management interface to only trusted internal network segments or VPN-controlled IP ranges, reducing the pool of users who can reach the vulnerable endpoints - note this does not eliminate risk from insider threats or compromised low-privilege accounts. Audit all existing user accounts for unauthorized privilege assignments that may indicate exploitation has already occurred. Disable or suspend unused low-privilege accounts until the patch can be applied.