CVE-2026-80443 PUBLISHED

Insecure TLS Certificate Validation in API Tool Runner in HAVELSAN's Sef - AI Chatbot Platform

Assigner: TR-CERT
Reserved: 26.08.2026 Published: 02.10.2026 Updated: 02.10.2026

Improper certificate validation vulnerability in HAVELSAN Inc. Sef - AI Chatbot Platform allows Adversary in the Middle (AiTM).

This issue affects Sef - AI Chatbot Platform: before 2.1. NOTE: The vendor was contacted and it was learned that the product is not supported.

Metrics

CVSS Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
CVSS Score: 7.4

Product Status

Vendor HAVELSAN Inc.
Product Sef - AI Chatbot Platform
Versions Default: unknown
  • affected from 0 to 2.1 (excl.)

Credits

  • Efe KIRBAŞ finder

References

Problem Types

  • CWE-295 Improper certificate validation CWE

Impacts

  • CAPEC-94 Adversary in the Middle (AiTM)