TÜBİTAK BİLGEM Software Technologies Research Institute

Records13All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high5CVSS 7.0–8.9

Exploited now

TÜBİTAK BİLGEM Software Technologies Research Institute records in CISA KEV

No TÜBİTAK BİLGEM Software Technologies Research Institute vulnerabilities are listed in CISA KEV.

Records

13 records

TI-2026-53129 CVE-2026-75896 · GHSA-7wqv-c2hc-jg8f

Use of Hard-coded LDAP Credentials in TÜBİTAK BİLGEM's Liderahenk

MEDIUM 47

Use of Hard-coded Credentials vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute Liderahenk allows Try Common or Default Usernames and Passwords.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00404 Published 2026-08-26 Fixed in 3.5.5 CWE-798

TI-2026-15720 CVE-2026-19271 · GHSA-24r5-pqg8-wx72

Blind LDAP Injection in Sign-In Endpoint in TÜBİTAK BİLGEM's Liderahenk

LOW 39

Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection') vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute Liderahenk allows LDAP Injection.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00416 Published 2026-08-26 Fixed in 3.5.5 CWE-90

TI-2026-15985 CVE-2026-19702 · GHSA-r8hh-g4qp-57p7

OS Command Injection in TÜBİTAK BİLGEM's Pardus Boot Repair

LOW 38

Improper neutralization of special elements used in an OS command ('OS command injection') vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute Pardus Boot Repair allows OS Command Injection.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00817 Published 2026-08-31 Fixed in 1.0.8 CWE-78

TI-2026-83798 CVE-2026-92886 · GHSA-wc8q-j59v-43c2

Privilege escalation in TÜBİTAK BİLGEM eta-register

LOW 35

Missing Authorization vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute eta-register allows Privilege Escalation.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00133 Published 2026-11-02 Fixed in 2.0.9 CWE-862

TI-2026-55130 CVE-2026-79617 · GHSA-3584-rwvv-wp47

Improper Access Control Leading to Display Exposure in TÜBİTAK BİLGEM's Pardus LightDM Greeter

LOW 32

Incorrect Permission Assignment for Critical Resource vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute Pardus LightDM Greeter allows Exploiting Incorrectly Configured Access Control Security Level…

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.00143 Published 2026-09-09 Fixed in 0.4.15 CWE-732

TI-2026-15399 CVE-2026-18806 · GHSA-55j4-vcvp-5mxf

Arbitrary Block Device Write via Missing Validation in TÜBİTAK BİLGEM's pardus-image-writer

LOW 30

External control of file name or path vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute pardus-image-writer allows Removing Important Client Functionality.

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.00148 Published 2026-08-04 Fixed in 0.9.0 CWE-73

TI-2026-85904 CVE-2026-105422 · GHSA-f2c6-p4f4-q5ff

Path traversal in TÜBİTAK BİLGEM pardus-boot-repair

LOW 28

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute pardus-boot-repair allows Path Traversal.

CVSS 3.1MEDIUM 6.6 Physical No auth User interaction EPSS 0.00175 Published 2026-11-06 Fixed in 1.1.0 CWE-22

TI-2026-85395 CVE-2026-95652 · GHSA-2w45-vhrc-j6gv

Excess privileges in pardus-usb-formatter let users format disks

LOW 28

Execution with unnecessary privileges vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute pardus-usb-formatter allows Privilege Abuse.

CVSS 3.1MEDIUM 6.6 Local Low privileges User interaction EPSS 0.0014 Published 2026-11-05 Fixed in 0.7.2 CWE-250

TI-2026-15467 CVE-2026-18915 · GHSA-2x9j-ppfr-c4pq

Exposure of OTP Secret Through Process Command-Line Arguments in TÜBİTAK BİLGEM's eta-otp-lock

LOW 22

Invocation of process using visible sensitive information vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute eta-otp-lock allows System Footprinting.

CVSS 3.1MEDIUM 5.0 Local Low privileges User interaction EPSS 0.00144 Published 2026-08-06 Fixed in 1.0.4 CWE-214

TI-2026-85906 CVE-2026-92080 · GHSA-27jh-g66f-p8v9

Path Traversal Leading to Arbitrary Mount in TÜBİTAK BİLGEM's pardus-boot-repair

LOW 20

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute pardus-boot-repair allows Path Traversal.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00277 Published 2026-11-06 Fixed in 1.1.0 CWE-22

TI-2026-84989 CVE-2026-19731 · GHSA-cgwj-vcgg-qcjc

Path traversal in TÜBİTAK BİLGEM İmzager

LOW 15

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute İmzager allows Path Traversal.

CVSS 3.1LOW 3.3 Local No auth User interaction EPSS 0.00127 Published 2026-11-04 Fixed in 2.10.7 CWE-22

TI-2026-84988 CVE-2026-19721 · GHSA-hggc-fwq7-pw8h

Improper XML external entity restriction in TÜBİTAK BİLGEM İmzager

LOW 15

Improper restriction of XML external entity reference vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute İmzager allows Serialized Data External Linking.

CVSS 3.1LOW 3.3 Local No auth User interaction EPSS 0.0011 Published 2026-11-04 Fixed in 2.10.7 CWE-611

TI-2026-13123 CVE-2026-15599 · GHSA-6cpw-v4wr-4622

Arbitrary Process Termination in TÜBİTAK BİLGEM's pardus-domain-joiner

LOW 15

Unverified ownership vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute pardus-domain-joiner allows Privilege Abuse.

CVSS 3.1LOW 3.3 Local Low privileges No interaction EPSS 0.00127 Published 2026-08-06 Fixed in 0.5.5 CWE-283

Open these records in search →

Critical	1
High	5
Medium	4
Low	3
No CVSS	0