CVE-2026-80443

HighCVSS 7.4

Published: 02/10/2026(UTC)Updated: 02/10/2026(UTC)Translated: 02/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.16%

5th percentile - higher than 5% of all known CVEs

Summary

HAVELSAN Inc. Sef - AI Chatbot Platform before 2.1 has an improper certificate validation vulnerability allowing Adversary in the Middle (AiTM) attacks. The product is no longer supported.

Risk Assessment

An attacker can intercept and modify communication between the user and the platform, leading to data theft or confidentiality breach.

Recommendation

Since the product is unsupported, discontinue its use and migrate to a supported solution.

Other vulnerabilities in HAVELSAN Sef - AI Chatbot Platform

CVE-2026-80298High
HAVELSAN Inc. Sef - AI Chatbot Platform before 2.1 has an SQL injection vulnerability due to improper neutralization of special elements in SQL commands. The product is no longer supported.

Original NVD description (English source)

Improper certificate validation vulnerability in HAVELSAN Inc. Sef - AI Chatbot Platform allows Adversary in the Middle (AiTM). This issue affects Sef - AI Chatbot Platform: before 2.1. NOTE: The vendor was contacted and it was learned that the product is not supported.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS