CVE-2026-80464

MediumCVSS 4.9

Published: 02/10/2026(UTC)Updated: 02/10/2026(UTC)Translated: 02/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.27%

18th percentile - higher than 18% of all known CVEs

Summary

Server-Side Request Forgery (SSRF) vulnerability in HAVELSAN Inc. Sef - AI Chatbot Platform allows Server Side Request Forgery. This issue affects versions before 2.1. Note: The vendor was contacted and it was learned that the product is not supported.

Risk Assessment

An attacker may use the server to scan the internal network or access resources they should not have access to.

Recommendation

Due to lack of product support, consider retiring or replacing it with a more secure solution. If possible, apply available patches.

Other vulnerabilities in Sef - AI Chatbot Platform

CVE-2026-80337Medium
Missing Authorization vulnerability in HAVELSAN Inc. Sef - AI Chatbot Platform allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects versions before 2.1. Note: The vendor was contacted and it was learned that the product is not supported.

Original NVD description (English source)

Server-Side request forgery (SSRF) vulnerability in HAVELSAN Inc. Sef - AI Chatbot Platform allows Server Side Request Forgery. This issue affects Sef - AI Chatbot Platform: before 2.1. NOTE: The vendor was contacted and it was learned that the product is not supported.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS