This vulnerability (CVE-2026-11348) in HAVELSAN Inc. Liman MYS is due to improper verification of cryptographic signatures (CWE-347). It enables an attacker to fake the source of data, compromising data integrity and authenticity. The CVSS 3.1 base score is 8.1, indicating high severity with network attack vector, high attack complexity, no privileges required, no user interaction, and high impact on confidentiality, integrity, and availability. The affected versions are all versions before release.Master.1107. No patch or official remediation level has been disclosed by the vendor, and no known exploits are reported in the wild.

Successful exploitation can lead to an attacker spoofing data sources, undermining the trustworthiness of data processed by Liman MYS. This can result in full compromise of confidentiality, integrity, and availability of the affected system. Given the high CVSS score, the impact is severe and can affect critical operations relying on authentic data.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should exercise caution when trusting cryptographic signatures within Liman MYS and consider additional verification mechanisms if possible. Monitor vendor communications for updates on patches or mitigations.