The vulnerability CVE-2026-13696 in HAVELSAN Inc. Liman MYS is classified as CWE-90, indicating improper neutralization of special elements used in an LDAP query, commonly known as LDAP injection. This allows an attacker with network access and low privileges to manipulate LDAP queries, potentially leading to unauthorized data access or modification. The CVSS 3.1 base score is 8.8, reflecting high severity with network attack vector, low attack complexity, required privileges, no user interaction, and high impact on confidentiality, integrity, and availability. The affected versions are those prior to release.Master.1107. There is no vendor advisory or patch information currently available.

Successful exploitation of this LDAP injection vulnerability can lead to unauthorized disclosure, modification, or deletion of LDAP directory data, severely impacting confidentiality, integrity, and availability of the system. Given the high CVSS score (8.8), the impact is significant if exploited.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict network access to the affected system and limit privileges of users interacting with LDAP queries to reduce risk.