CVE Intelligence

TUBITAK BILGEM Software Technologies Research Institute vulnerabilities

🔔 Create alert RSS

Published CVEs affecting TUBITAK BILGEM Software Technologies Research Institute products: 28 record(s), with severity, exploitation and fixes.

Liderahenk 5Pardus-software 4Pardus Update 3Pardus Software Center 2Pardus About 2Pardus Pen 2Eta-otp-lock 2Pardus Boot Repair 2Pardus OS My Computer 1Pardus Domain Joiner 1Pardus-Parental-Control 1Pardus-image-writer 1Pardus-domain-joiner 1Pardus LightDM Greeter 1

Exploited only (KEV) →

CVE-2026-8304 Medium · 5.5 CWE-862 Sep 11, 2026
Information Disclosure in TUBITAK BILGEM's Pardus About
Missing Authorization vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus About allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Pardus About: from 1.2.1 before 1.2.5.
CVE-2026-7863 High · 8.4 CWE-78 Sep 11, 2026
OS Command Injection in TUBITAK BILGEM's Pardus Software
Improper neutralization of special elements used in an OS command ('OS command injection') vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus Software allows OS Command Injection. This issue affects Pardus Software: before 1.0.5.
CVE-2026-8303 High · 7.8 CWE-266 Sep 11, 2026
Privilege Escalation in TUBITAK BILGEM's Pardus-software
Incorrect privilege assignment vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus-software allows Privilege Escalation. This issue affects Pardus-software: before 1.0.5.
CVE-2026-8301 High · 7.8 CWE-78 Sep 11, 2026
OS Command Injection in TUBITAK BILGEM's Pardus-boot-repair
Improper neutralization of special elements used in an OS command ('OS command injection') vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus Boot Repair allows OS Command Injection. This issue affects Pardus Boot Repair: before 1.0.8.
CVE-2026-11765 Low · 3.3 CWE-88 Sep 11, 2026
Argument Injection in TUBITAK BILGEM's Pardus Pen
Improper neutralization of argument delimiters in a command ('argument injection') vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus Pen allows Argument Injection. This issue affects Pardus Pen: before 4.2.1.
CVE-2026-79617 High · 7.1 CWE-732 Sep 9, 2026
Improper Access Control Leading to Display Exposure in TÜBİTAK BİLGEM's Pardus LightDM Greeter
Incorrect Permission Assignment for Critical Resource vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute Pardus LightDM Greeter allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Pardus LightDM Greeter: before 0.4.15.
CVE-2026-19702 High · 7.8 CWE-78 Aug 31, 2026
OS Command Injection in TÜBİTAK BİLGEM's Pardus Boot Repair
Improper neutralization of special elements used in an OS command ('OS command injection') vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute Pardus Boot Repair allows OS Command Injection. This issue affects Pardus Boot Repair: from 1.0.7 before 1.0.8.
CVE-2026-75896 Critical · 9.1 CWE-798 Aug 26, 2026
Use of Hard-coded LDAP Credentials in TÜBİTAK BİLGEM's Liderahenk
Use of Hard-coded Credentials vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute Liderahenk allows Try Common or Default Usernames and Passwords. This issue affects Liderahenk: before 3.5.5.
CVE-2026-19271 High · 7.5 CWE-90 Aug 26, 2026
Blind LDAP Injection in Sign-In Endpoint in TÜBİTAK BİLGEM's Liderahenk
Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection') vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute Liderahenk allows LDAP Injection. This issue affects Liderahenk: from 3.4.0 before 3.5.5.
CVE-2026-15599 Low · 3.3 CWE-283 Aug 6, 2026
Arbitrary Process Termination in TÜBİTAK BİLGEM's pardus-domain-joiner
Unverified ownership vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute pardus-domain-joiner allows Privilege Abuse. This issue affects pardus-domain-joiner: before 0.5.5.
CVE-2026-18915 Medium · 5.0 CWE-214 Aug 6, 2026
Exposure of OTP Secret Through Process Command-Line Arguments in TÜBİTAK BİLGEM's eta-otp-lock
Invocation of process using visible sensitive information vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute eta-otp-lock allows System Footprinting. This issue affects eta-otp-lock: before 1.0.4.
CVE-2026-18806 High · 7.1 CWE-73 Aug 4, 2026
Arbitrary Block Device Write via Missing Validation in TÜBİTAK BİLGEM's pardus-image-writer
External control of file name or path vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute pardus-image-writer allows Removing Important Client Functionality. This issue affects pardus-image-writer: before 0.9.0.
CVE-2026-18642 High · 7.8 CWE-502 Aug 3, 2026
Remote Code Execution via Insecure Deserialization in TÜBİTAK BİLGEM's eta-otp-lock
Deserialization of untrusted data vulnerability in TUBITAK BILGEM Software Technologies Research Institute eta-otp-lock allows Object Injection. This issue affects eta-otp-lock: before 1.0.4.
CVE-2026-16287 High · 7.8 CWE-78 Jul 23, 2026
Root Command Injection via Offline Update in TÜBİTAK BİLGEM's pardus-update
Improper neutralization of special elements used in an OS command ('OS command injection') vulnerability in TUBITAK BILGEM Software Technologies Research Institute pardus-update allows OS Command Injection. This issue affects pardus-update: from 0.6.6 before 0.7.0.
CVE-2026-9085 High · 8.8 CWE-284 Jul 5, 2026
DNS Hijacking in TUBITAK BILGEM's Pardus-Parental-Control
Incorrect Permission Assignment for Critical Resource, Improper Access Control vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus-Parental-Control allows DNS Spoofing. This issue affects Pardus-Parental-Control: from <=0.5.1 before 0.7.0.
CVE-2026-6509 High · 7.8 CWE-862 Jul 5, 2026
Privilege Escalation in TUBITAK BILGEM's Pardus Update
Missing Authorization vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus Update allows Privilege Escalation. This issue affects Pardus Update: from <=0.6.3 before 0.6.6.
CVE-2026-12386 Low · 3.9 CWE-170 Jul 5, 2026
Buffer Overflow in TUBITAK BILGEM's Pardus Pen
Improper null termination vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus Pen allows Overflow Buffers. This issue affects Pardus Pen: from <=4.1.5 before 4.2.1.
CVE-2026-12250 High · 7.9 CWE-214 Jul 5, 2026
Sensitive Data Exposure in TUBITAK BILGEM's Pardus Domain Joiner
Invocation of process using visible sensitive information vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus Domain Joiner allows Excavation. This issue affects Pardus Domain Joiner: from 0.5.2 before 0.5.4.
CVE-2026-14460 High · 8.8 CWE-862 Jul 3, 2026
Missing Authorization in TUBITAK BILGEM's pardus-software
Missing Authorization vulnerability in TUBITAK BILGEM Software Technologies Research Institute pardus-software allows Argument Injection. This issue affects pardus-software: from <= 1.0.4 before 1.0.5.
CVE-2026-14459 High · 8.8 CWE-88 Jul 3, 2026
Argument Injection in TUBITAK BILGEM's pardus-software
Improper neutralization of argument delimiters in a command ('argument injection') vulnerability in TUBITAK BILGEM Software Technologies Research Institute pardus-software allows Argument Injection. This issue affects pardus-software: from <= 1.0.4 before 1.0.5.
CVE-2026-6508 Critical · 9.8 CWE-346 May 7, 2026
TUBITAK BILGEM Liderahenk Origin Validation Error Allowing Access to Improperly Constrained Functionality
Origin Validation Error vulnerability in TUBITAK BILGEM Software Technologies Research Institute Liderahenk allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Liderahenk: from 2.0.1 before 2.0.2.
CVE-2026-6849 High · 8.8 CWE-78 Apr 29, 2026
OS Command Injection in TUBITAK BILGEM's Pardus OS My Computer
Improper neutralization of special elements used in an OS command ('OS command injection') vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus OS My Computer allows OS Command Injection. This issue affects Pardus OS My Computer: from <=0.7.5 before 0.8.0.
CVE-2026-5166 Critical · 9.6 CWE-22 Apr 29, 2026
Path Traversal in TUBITAK BILGEM's Pardus Software Center
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus Software Center allows Path Traversal. This issue affects Pardus Software Center: before 0.6.4.
CVE-2026-5161 High · 8.8 CWE-59 Apr 29, 2026
Improper Authentication in TUBITAK BILGEM's Pardus About
Improper link resolution before file access ('link following') vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus About allows Symlink Attack. This issue affects Pardus About: before 1.2.2.
CVE-2026-5141 High · 8.8 CWE-266 Apr 29, 2026
Improper Access Control in TUBITAK BILGEM's Pardus Software Center
Improper Privilege Management, Improper Access Control, Incorrect privilege assignment vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus Software Center allows Hijacking a privileged process. This issue affects Pardus Software Center: from 1.0.2 before 1.0.3.