CVE-2026-80298

HighCVSS 8.8

Published: 02/10/2026(UTC)Updated: 02/10/2026(UTC)Translated: 02/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.30%

20th percentile - higher than 20% of all known CVEs

Summary

HAVELSAN Inc. Sef - AI Chatbot Platform before 2.1 has an SQL injection vulnerability due to improper neutralization of special elements in SQL commands. The product is no longer supported.

Risk Assessment

Attackers can exploit the vulnerability for unauthorized database access, data theft, or modification.

Recommendation

Since the product is unsupported, discontinue its use and migrate to a supported solution.

Other vulnerabilities in HAVELSAN Sef - AI Chatbot Platform

CVE-2026-80443High
HAVELSAN Inc. Sef - AI Chatbot Platform before 2.1 has an improper certificate validation vulnerability allowing Adversary in the Middle (AiTM) attacks. The product is no longer supported.

Original NVD description (English source)

Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in HAVELSAN Inc. Sef - AI Chatbot Platform allows SQL Injection. This issue affects Sef - AI Chatbot Platform: before 2.1. NOTE: The vendor was contacted and it was learned that the product is not supported.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS