Liman MYS Missing Authorization Allows Unauthorized Functionality Access

Missing Authorization vulnerability in HAVELSAN Inc. Liman MYS allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Liman MYS: from 2.2.3 before 2.3.1.

Casky was already ahead

This CVE exploits attack patterns that Casky's 283matched skills already investigate — long before this vulnerability was disclosed. Claude's reasoning model maps these techniques to MITRE ATT&CK, so practitioners who ran these skills have already seen the threat behaviour in their findings.

Analysis

CVE-2026-17070 represents a critical authorization bypass in HAVELSAN Inc.'s Liman MYS platform, affecting versions 2.2.3 through 2.3.0. This missing authorization vulnerability (CWE-862) allows attackers to access functionality that should be restricted by access control lists (ACLs), effectively circumventing permission checks that protect sensitive operations. Organizations running vulnerable versions of Liman MYS face significant risk, as attackers can exploit this flaw to perform privileged actions without proper authentication or authorization validation. The vulnerability's high CVSS score of 8.8 underscores its severity and the urgency for immediate patching to version 2.3.1 or later.

Casky's 283 mapped security skills leverage Claude AI's extended reasoning to identify the attack patterns underlying this vulnerability across MITRE ATT&CK tactics TA0004 (Privilege Escalation) and TA0006 (Credential Access). Practitioners using Casky would detect indicators such as: unauthorized API calls or function invocations that bypass ACL checks, anomalous access to administrative features from non-privileged accounts, and privilege escalation attempts that succeed without corresponding permission elevation. The platform's skill set enables detection of reconnaissance activities probing for unprotected endpoints, lateral movement attempts leveraging the authorization gap, and suspicious access to restricted resources. Security teams would observe patterns where users access functionality typically gated by role-based controls, revealing the absence of proper authorization validation at the application logic layer—a hallmark of this CWE-862 class vulnerability.

Live Threat IntelligenceComing soon

Casky Risk Score

—

EPSS Probability

—

Shodan Exposure

—

GreyNoise Signal

—

Composite risk scoring from EPSS, CISA KEV, Shodan, and GreyNoise — 21 security APIs correlated into a single Casky Risk Score. Coming in Casky Pro. Join early access →

283 Casky skills cover this attack pattern

These skills use Claude AI's reasoning model to surface findings in the same attack categories as CVE-2026-17070.

abusing-dpapi-for-credential-access

red teaming · high

Run

abusing-shadow-credentials-for-privesc

red teaming · high

Run

Access with Stolen Session Cookie

identity access management · low

Run

MITRE ATT&CK Techniques

TA0004 TA0006

Investigate the attack patterns behind CVE-2026-17070

Casky has 283 skills that investigate the attack patterns behind CVE-2026-17070. Run one and get CVSS-scored findings in 3 minutes.

Run the skill that detects this →

X Instagram LinkedIn