Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

21 records

Vendor: TUBITAK BILGEM Software Technologies Research Institute Clear all filters
TI-2026-06921 CVE-2026-7863 · GHSA-q527-g5jm-fj67

OS Command Injection in TUBITAK BILGEM's Pardus Software

Priority MEDIUM 40

Improper neutralization of special elements used in an OS command ('OS command injection') vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus Software allows OS Command Injection.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00953 Published 2026-09-11 Fixed in 1.0.5 CWE-78
TI-2026-07314 CVE-2026-8304 · GHSA-6rg9-qq5j-wggv

Information Disclosure in TUBITAK BILGEM's Pardus About

Priority LOW 24

Missing Authorization vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus About allows Exploiting Incorrectly Configured Access Control Security Levels.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00139 Published 2026-09-11 Fixed in 1.2.5 CWE-862
TI-2026-07312 CVE-2026-8301 · GHSA-5v68-pwx6-vvhc

OS Command Injection in TUBITAK BILGEM's Pardus-boot-repair

Priority LOW 38

Improper neutralization of special elements used in an OS command ('OS command injection') vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus Boot Repair allows OS Command Injection.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00842 Published 2026-09-11 Fixed in 1.0.8 CWE-78
TI-2026-07313 CVE-2026-8303 · GHSA-6h27-fj47-54hm

Privilege Escalation in TUBITAK BILGEM's Pardus-software

Priority LOW 35

Incorrect privilege assignment vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus-software allows Privilege Escalation.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00144 Published 2026-09-11 Fixed in 1.0.5 CWE-266
TI-2026-10153 CVE-2026-11765 · GHSA-8jgw-pvr8-c8v3

Argument Injection in TUBITAK BILGEM's Pardus Pen

Priority LOW 15

Improper neutralization of argument delimiters in a command ('argument injection') vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus Pen allows Argument Injection.

CVSS 3.1LOW 3.3 Local Low privileges No interaction EPSS 0.00171 Published 2026-09-11 Fixed in 4.2.1 CWE-88
TI-2026-13617 CVE-2026-16287 · GHSA-48px-72pc-9gfw

Root Command Injection via Offline Update in TÜBİTAK BİLGEM's pardus-update

Priority LOW 38

Improper neutralization of special elements used in an OS command ('OS command injection') vulnerability in TUBITAK BILGEM Software Technologies Research Institute pardus-update allows OS Command Injection.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00842 Published 2026-07-23 Fixed in 0.7.0 CWE-78
TI-2026-05705 CVE-2026-6509 · GHSA-fcx2-pfmg-pwvq

Privilege Escalation in TUBITAK BILGEM's Pardus Update

Priority LOW 35

Missing Authorization vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus Update allows Privilege Escalation.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00144 Published 2026-07-05 Fixed in 0.6.6 CWE-862
TI-2026-07982 CVE-2026-9085 · GHSA-686q-wrh7-cph5

DNS Hijacking in TUBITAK BILGEM's Pardus-Parental-Control

Priority LOW 39

Incorrect Permission Assignment for Critical Resource, Improper Access Control vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus-Parental-Control allows DNS Spoofing.

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.00144 Published 2026-07-05 Fixed in 0.7.0 CWE-284
TI-2026-10635 CVE-2026-12386 · GHSA-hmmj-28g4-h22x

Buffer Overflow in TUBITAK BILGEM's Pardus Pen

Priority LOW 17

Improper null termination vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus Pen allows Overflow Buffers.

CVSS 3.1LOW 3.9 Local Low privileges User interaction EPSS 0.00134 Published 2026-07-05 Fixed in 4.2.1 CWE-170
TI-2026-10536 CVE-2026-12250 · GHSA-9pj6-hfxh-g9g8

Sensitive Data Exposure in TUBITAK BILGEM's Pardus Domain Joiner

Priority LOW 35

Invocation of process using visible sensitive information vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus Domain Joiner allows Excavation.

CVSS 3.1HIGH 7.9 Local Low privileges User interaction EPSS 0.00153 Published 2026-07-05 Fixed in 0.5.4 CWE-214
TI-2026-12222 CVE-2026-14460 · GHSA-8725-rp9g-qx9v

Missing Authorization in TUBITAK BILGEM's pardus-software

Priority LOW 39

Missing Authorization vulnerability in TUBITAK BILGEM Software Technologies Research Institute pardus-software allows Argument Injection.

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.00163 Published 2026-07-03 Fixed in 1.0.5 CWE-862
TI-2026-12221 CVE-2026-14459 · GHSA-rrqp-52wf-rr49

Argument Injection in TUBITAK BILGEM's pardus-software

Priority LOW 39

Improper neutralization of argument delimiters in a command ('argument injection') vulnerability in TUBITAK BILGEM Software Technologies Research Institute pardus-software allows Argument Injection.

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.00208 Published 2026-07-03 Fixed in 1.0.5 CWE-88
TI-2026-05704 CVE-2026-6508 · GHSA-6j26-x548-mh3c

RCE in TUBITAK BILGEM's Liderahenk

Priority MEDIUM 48

Origin Validation Error vulnerability in TUBITAK BILGEM Software Technologies Research Institute Liderahenk allows Accessing Functionality Not Properly Constrained by ACLs.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00223 Published 2026-05-07 Fixed in 2.0.2 CWE-346
TI-2026-06008 CVE-2026-6849 · GHSA-7v3p-wpx4-69fx

OS Command Injection in TUBITAK BILGEM's Pardus OS My Computer

Priority MEDIUM 42

Improper neutralization of special elements used in an OS command ('OS command injection') vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus OS My Computer allows OS Command Injection.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01009 Published 2026-04-29 Fixed in 0.8.0 CWE-78
TI-2026-04510 CVE-2026-5166 · GHSA-7wvq-6qh5-gv74

Path Traversal in TUBITAK BILGEM's Pardus Software Center

Priority MEDIUM 43

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus Software Center allows Path Traversal.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.00326 Published 2026-04-29 Fixed in 0.6.4 CWE-22
TI-2026-04505 CVE-2026-5161 · GHSA-jxvm-52qc-qcp4

Improper Authentication in TUBITAK BILGEM's Pardus About

Priority MEDIUM 40

Improper link resolution before file access ('link following') vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus About allows Symlink Attack.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00326 Published 2026-04-29 Fixed in 1.2.2 CWE-59
TI-2026-04488 CVE-2026-5141 · GHSA-58qw-qvfh-938c

Improper Access Control in TUBITAK BILGEM's Pardus Software Center

Priority LOW 39

Improper Privilege Management, Improper Access Control, Incorrect privilege assignment vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus Software Center allows Hijacking a privileged process…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00228 Published 2026-04-29 Fixed in 1.0.3 CWE-266
TI-2026-04487 CVE-2026-5140 · GHSA-84g5-732r-258r

Authorization Bypass in TUBITAK BILGEM's Pardus Update

Priority MEDIUM 41

Improper neutralization of CRLF sequences ('CRLF injection') vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus Update allows Authentication Bypass.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00481 Published 2026-04-29 Fixed in 0.6.4 CWE-93
TI-2026-01977 CVE-2026-2339 · GHSA-g69f-2fw2-vv87

RCE in TUBITAK BILGEM's Liderahenk

Priority LOW 37

Missing Authentication for Critical Function vulnerability in TUBITAK BILGEM Software Technologies Research Institute Liderahenk allows Remote Code Inclusion, Privilege Abuse, Command Injection.

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.00945 Published 2026-03-10 Fixed in 3.5.1 CWE-306
TI-2025-07032 CVE-2025-7706 · GHSA-8jrm-jhc8-cchx

Improper Access Control in TUBITAK BILGEM's Liderahenk

Priority LOW 29

Missing Authentication for Critical Function vulnerability in TUBITAK BILGEM Software Technologies Research Institute Liderahenk allows Remote Code Inclusion.

CVSS 3.1MEDIUM 6.1 Network High privileges User interaction EPSS 0.00296 Published 2026-02-17 Fixed in 3.5.0 CWE-306