TI-2026-85906 Aliases CVE-2026-92080 GHSA-27jh-g66f-p8v9

Path Traversal Leading to Arbitrary Mount in TÜBİTAK BİLGEM's pardus-boot-repair

LOW 20CWE-22Published 2026-11-06 · Updated 2026-11-06

Key facts

Attack vector: Network
Privileges required: None
User interaction: Required
Attack complexity: Low
Impact type: —
Confidentiality · integrity · availability: None · Low · None
Fix status: Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA.

Summary

TÜBİTAK BİLGEM's pardus-boot-repair, versions from 1.0.8 before 1.1.0, contains a path traversal flaw (CWE-22) that allows path traversal and can lead to an arbitrary mount. The CVSS 3.1 base score is 4.3 (MEDIUM), with the vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N. The CNA has not listed the issue in CISA KEV, and no exploit link appears in the references.

Written with Claude Haiku 5.5 from the sources below · 2026-11-06

Description from the CNA

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute pardus-boot-repair allows Path Traversal. This issue affects pardus-boot-repair: from 1.0.8 before 1.1.0.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV

EPSS 0.00277 20th percentileScored 2026-11-07

Fix Fixed pardus-boot-repair (TÜBİTAK BİLGEM Software Technologies Research Institute): 1.1.0

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: None
Automatable: No
Technical impact: Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
TÜBİTAK BİLGEM Software Technologies Research Institute	pardus-boot-repair	1.0.8 to before 1.1.0	1.1.0	Patch available	CNA

pardus-boot-repair VendorTÜBİTAK BİLGEM Software Technologies Research Institute Affected 1.0.8 to before 1.1.0 Fixed in 1.1.0 Patch available CNA

Remediation

Upgrade pardus-boot-repair to version 1.1.0 or later.

Written with Claude Haiku 5.5 from the sources below · 2026-11-06

Fix · CNA pardus-boot-repair (TÜBİTAK BİLGEM Software Technologies Research Institute) Fixed in 1.1.0

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

Release · 2026-11-06
TÜBİTAK BİLGEM Software Technologies Research Institute pardus-boot-repair 1.1.0
2 records Highest priority Priority LOW 2 LOW
Other records, highest priority first
- TI-2026-85904 Path traversal in TÜBİTAK BİLGEM pardus-boot-repairPriority LOW 28
Show all 2 records →

Timeline

2026-11-06 Threatist record created from CVE-2026-92080
2026-11-06 CISA SSVC decision points changed
2026-11-06 Alias added: GHSA-27jh-g66f-p8v9

References

Other 1

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1477

TI-2026-53129 Use of Hard-coded LDAP Credentials in TÜBİTAK BİLGEM's Liderahenk CVSS 3.1CRITICAL 9.1
TI-2026-15720 Blind LDAP Injection in Sign-In Endpoint in TÜBİTAK BİLGEM's Liderahenk CVSS 3.1HIGH 7.5
TI-2026-15985 OS Command Injection in TÜBİTAK BİLGEM's Pardus Boot Repair CVSS 3.1HIGH 7.8
TI-2026-83798 Privilege escalation in TÜBİTAK BİLGEM eta-register CVSS 3.1HIGH 7.8
TI-2026-55130 Improper Access Control Leading to Display Exposure in TÜBİTAK BİLGEM's Pardus LightDM Greeter CVSS 3.1HIGH 7.1
TI-2026-15399 Arbitrary Block Device Write via Missing Validation in TÜBİTAK BİLGEM's pardus-image-writer CVSS 3.1HIGH 7.1

See all 12 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences