CVE-2026-80464 PUBLISHED

API Tool Runner SSRF in HAVELSAN's Sef - AI Chatbot Platform

Assigner: TR-CERT
Reserved: 26.08.2026 Published: 02.10.2026 Updated: 02.10.2026

Server-Side request forgery (SSRF) vulnerability in HAVELSAN Inc. Sef - AI Chatbot Platform allows Server Side Request Forgery.

This issue affects Sef - AI Chatbot Platform: before 2.1. NOTE: The vendor was contacted and it was learned that the product is not supported.

Metrics

CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
CVSS Score: 4.9

Product Status

Vendor HAVELSAN Inc.
Product Sef - AI Chatbot Platform
Versions Default: unknown
  • affected from 0 to 2.1 (excl.)

Credits

  • Akıner KISA finder

References

Problem Types

  • CWE-918 Server-Side request forgery (SSRF) CWE

Impacts

  • CAPEC-664 Server Side Request Forgery