CVE-2026-19532CWE-22path-traversal

CVE-2026-19532

Medium · published September 24, 2026

CVSS v3.1

5.3

EPSS

Percentile

17.1

In the wild

Unconfirmed

What it is

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in HAVELSAN Inc. Liman MYS allows Path Traversal.

This issue affects Liman MYS: from 2.3.2 before 2.3.4-1124.

The record

Technical detail

CVSS v3.1: 5.3 · MEDIUM
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0: Not supplied
EPSS: 0.00263 · 17.1th percentile
Weakness: CWE-22 · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Published: 2026-09-24T16:17Z

References (1)

EPSS history

Timeline