CVE-2026-80443 describes an improper certificate validation vulnerability in HAVELSAN Inc.'s Sef - AI Chatbot Platform versions prior to 2.1. This vulnerability enables an adversary to conduct an Adversary in the Middle (AiTM) attack by exploiting the failure to properly validate certificates. The CVSS v3.1 base score is 7.4, indicating high severity, with network attack vector, high attack complexity, no privileges required, no user interaction, and impacts on confidentiality and integrity but not availability.

Successful exploitation allows an attacker to intercept and potentially manipulate communications between the client and server by exploiting improper certificate validation. This compromises confidentiality and integrity of data exchanged with the affected platform. There is no indication of availability impact or known active exploitation in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch information is currently available. Until a patch is released, users should exercise caution when using affected versions and consider additional network protections to mitigate AiTM risks.