CVE-2026-80337

MediumCVSS 5.3

Published: 02/10/2026(UTC)Updated: 02/10/2026(UTC)Translated: 02/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.21%

10th percentile - higher than 10% of all known CVEs

Summary

Missing Authorization vulnerability in HAVELSAN Inc. Sef - AI Chatbot Platform allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects versions before 2.1. Note: The vendor was contacted and it was learned that the product is not supported.

Risk Assessment

Unauthorized access to functionality may lead to confidentiality or integrity breaches and unauthorized actions.

Recommendation

Due to lack of product support, consider retiring or replacing it with a more secure solution. If possible, apply available patches.

Other vulnerabilities in Sef - AI Chatbot Platform

CVE-2026-80464Medium
Server-Side Request Forgery (SSRF) vulnerability in HAVELSAN Inc. Sef - AI Chatbot Platform allows Server Side Request Forgery. This issue affects versions before 2.1. Note: The vendor was contacted and it was learned that the product is not supported.

Original NVD description (English source)

Missing Authorization vulnerability in HAVELSAN Inc. Sef - AI Chatbot Platform allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Sef - AI Chatbot Platform: before 2.1. NOTE: The vendor was contacted and it was learned that the product is not supported.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS