SOC status:Duty analyst on shift

UK Cyber Defence
VulnerabilityDeferred

CVE-2026-77703

Key exchange without entity authentication vulnerability in HAVELSAN Inc.

MEDIUM 5.9EPSS 0.24%

Does this matter?

Lower severity and a low EPSS score (0.24%). Track it; it rarely justifies an emergency change on its own.

Description

Key exchange without entity authentication vulnerability in HAVELSAN Inc. Liman Render Engine allows Adversary in the Middle (AiTM). This issue affects Liman Render Engine: from 1.0 before 1.2-75.

CVSS 3.1
5.9 MEDIUMCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS
0.24% probability · 15th percentile
Public exploits
None in Exploit-DB
CISA KEV
Not listed
Weakness
CWE-322
Source
iletisim@usom.gov.tr
EPSS trend
0%3%5%25 September 2026: 0.24%26 October 2026: 0.24%25 September 202626 October 2026

EPSS moved from 0.2% on 25 September 2026 to 0.2% on 26 October 2026.

Source: NVD record, EPSS from FIRST.org, KEV from CISA, exploits from Exploit-DB. Refreshed daily. Download this record as JSON.