PT-2026-97836
CVE-2026-77707
·
Published
2026-09-24
·
Updated
2026-09-24
Description by
CVSS 3.1
5.9
MediumMetricsAV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Liman Render Engine versions 1.0 through 1.2-74
Description
Improper certificate validation in the Liman Render Engine allows an Adversary in the Middle (AiTM) attack. This occurs because TLS certificate validation is disabled for Keycloak connections.
Recommendations
Update Liman Render Engine to version 1.2-75 or later.
Found an issue in the description? Have something to add? Feel free to write us 👾