TUBITAK BILGEM Software Technologies Research Institute vulnerabilities

We track 28 vulnerabilities in TUBITAK BILGEM Software Technologies Research Institute products across 15 products. 28 are rated high or critical, and none are known to be exploited. The most recent was published on November 12, 2026.

28vulnerabilities

3critical

25high

0exploited

8.2average CVSS score

Latest TUBITAK BILGEM Software Technologies Research Institute vulnerabilities

7.8 High severity
Pardus About: Incorrect Authorization
CVE-2026-87772Nov 12, 2026TUBITAK BILGEM Software Technologies Research Institute
Incorrect Authorization vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute Pardus About allows Privilege Escalation. This issue affects Pardus About: before 1.2.5.
7.0 High severity
pardus-nvidia-installer: Permissive List of Allowed Inputs
CVE-2026-16478Nov 10, 2026TUBITAK BILGEM Software Technologies Research Institute
Permissive list of allowed inputs vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute pardus-nvidia-installer allows Privilege Escalation. This issue affects pardus-nvidia-installer: before 2.0.1.
7.8 High severity
eta-remote: Incorrect Default Permissions
CVE-2026-121267Nov 10, 2026TUBITAK BILGEM Software Technologies Research Institute
Incorrect default permissions vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute eta-remote allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects eta-remote: from 0.0.2 before 0.0.3.
8.8 High severity
Pardus Boot Repair: Improper Neutralization of Special Elements used in an OS Command
CVE-2026-94434Nov 9, 2026TUBITAK BILGEM Software Technologies Research InstituteEPSS 1.28%
Improper neutralization of special elements used in an OS command ('OS command injection') vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute Pardus Boot Repair allows OS Command Injection. This issue affects Pardus Boot Repair: from 1.0.
8.1 High severity
Liderahenk: Missing Authorization
CVE-2026-94249Nov 9, 2026TUBITAK BILGEM Software Technologies Research Institute
Missing Authorization vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute Liderahenk allows Privilege Abuse. This issue affects Liderahenk: before 2.0.3.
7.8 High severity
eta-register: Missing Authorization
CVE-2026-92886Nov 2, 2026TUBITAK BILGEM Software Technologies Research Institute
Missing Authorization vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute eta-register allows Privilege Escalation. This issue affects eta-register: from 2.0.8 before 2.0.9.
8.4 High severity
Pardus Software: Improper Neutralization of Special Elements used in an OS Command
CVE-2026-7863Sep 11, 2026TUBITAK BILGEM Software Technologies Research Institute
Improper neutralization of special elements used in an OS command ('OS command injection') vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus Software allows OS Command Injection. This issue affects Pardus Software: before 1.0.5.
7.8 High severity
Pardus-software: Incorrect Privilege Assignment
CVE-2026-8303Sep 11, 2026TUBITAK BILGEM Software Technologies Research Institute
Incorrect privilege assignment vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus-software allows Privilege Escalation. This issue affects Pardus-software: before 1.0.5.
7.8 High severity
Pardus Boot Repair: Improper Neutralization of Special Elements used in an OS Command
CVE-2026-8301Sep 11, 2026TUBITAK BILGEM Software Technologies Research Institute
Improper neutralization of special elements used in an OS command ('OS command injection') vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus Boot Repair allows OS Command Injection. This issue affects Pardus Boot Repair: before 1.
7.1 High severity
Pardus LightDM Greeter: Incorrect Permission Assignment for Critical Resource
CVE-2026-79617Sep 9, 2026TUBITAK BILGEM Software Technologies Research Institute
Incorrect Permission Assignment for Critical Resource vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute Pardus LightDM Greeter allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Pardus LightDM Gre
7.8 High severity
Pardus Boot Repair: Improper Neutralization of Special Elements used in an OS Command
CVE-2026-19702Aug 31, 2026TUBITAK BILGEM Software Technologies Research Institute
Improper neutralization of special elements used in an OS command ('OS command injection') vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute Pardus Boot Repair allows OS Command Injection. This issue affects Pardus Boot Repair: from 1.0.
9.1 Critical severity
Liderahenk: Use of Hard-coded Credentials
CVE-2026-75896Aug 26, 2026TUBITAK BILGEM Software Technologies Research Institute
Use of Hard-coded Credentials vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute Liderahenk allows Try Common or Default Usernames and Passwords. This issue affects Liderahenk: before 3.5.5.
7.5 High severity
Liderahenk: Improper Neutralization of Special Elements used in an LDAP Query
CVE-2026-19271Aug 26, 2026TUBITAK BILGEM Software Technologies Research Institute
Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection') vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute Liderahenk allows LDAP Injection. This issue affects Liderahenk: from 3.4.0 before 3.5.5.
7.1 High severity
pardus-image-writer: External Control of File Name or Path
CVE-2026-18806Aug 4, 2026TUBITAK BILGEM Software Technologies Research Institute
External control of file name or path vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute pardus-image-writer allows Removing Important Client Functionality. This issue affects pardus-image-writer: before 0.9.0.
7.8 High severity
eta-otp-lock: Deserialization of Untrusted Data
CVE-2026-18642Aug 3, 2026TUBITAK BILGEM Software Technologies Research Institute
Deserialization of untrusted data vulnerability in TUBITAK BILGEM Software Technologies Research Institute eta-otp-lock allows Object Injection. This issue affects eta-otp-lock: before 1.0.4.
7.8 High severity
pardus-update: Improper Neutralization of Special Elements used in an OS Command
CVE-2026-16287Jul 23, 2026TUBITAK BILGEM Software Technologies Research Institute
Improper neutralization of special elements used in an OS command ('OS command injection') vulnerability in TUBITAK BILGEM Software Technologies Research Institute pardus-update allows OS Command Injection. This issue affects pardus-update: from 0.6.6 before 0
8.8 High severity
Pardus-Parental-Control: Improper Access Control
CVE-2026-9085Jul 5, 2026TUBITAK BILGEM Software Technologies Research Institute
Incorrect Permission Assignment for Critical Resource, Improper Access Control vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus-Parental-Control allows DNS Spoofing. This issue affects Pardus-Parental-Control: from <=0.5.1 before
7.8 High severity
Pardus Update: Missing Authorization
CVE-2026-6509Jul 5, 2026TUBITAK BILGEM Software Technologies Research Institute
Missing Authorization vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus Update allows Privilege Escalation. This issue affects Pardus Update: from <=0.6.3 before 0.6.6.
7.9 High severity
Pardus Domain Joiner: Invocation of Process Using Visible Sensitive Information
CVE-2026-12250Jul 5, 2026TUBITAK BILGEM Software Technologies Research Institute
Invocation of process using visible sensitive information vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus Domain Joiner allows Excavation. This issue affects Pardus Domain Joiner: from 0.5.2 before 0.5.4.
8.8 High severity
pardus-software: Missing Authorization
CVE-2026-14460Jul 3, 2026TUBITAK BILGEM Software Technologies Research Institute
Missing Authorization vulnerability in TUBITAK BILGEM Software Technologies Research Institute pardus-software allows Argument Injection. This issue affects pardus-software: from <= 1.0.4 before 1.0.5.
8.8 High severity
pardus-software: Improper Neutralization of Argument Delimiters in a Command
CVE-2026-14459Jul 3, 2026TUBITAK BILGEM Software Technologies Research Institute
Improper neutralization of argument delimiters in a command ('argument injection') vulnerability in TUBITAK BILGEM Software Technologies Research Institute pardus-software allows Argument Injection. This issue affects pardus-software: from <= 1.0.4 before 1.0.
9.8 Critical severity
Liderahenk: Origin Validation Error
CVE-2026-6508May 7, 2026TUBITAK BILGEM Software Technologies Research Institute
Origin Validation Error vulnerability in TUBITAK BILGEM Software Technologies Research Institute Liderahenk allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Liderahenk: from 2.0.1 before 2.0.2.
8.8 High severity
Pardus OS My Computer: Improper Neutralization of Special Elements used in an OS Command
CVE-2026-6849Apr 29, 2026TUBITAK BILGEM Software Technologies Research InstituteEPSS 1.01%
Improper neutralization of special elements used in an OS command ('OS command injection') vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus OS My Computer allows OS Command Injection. This issue affects Pardus OS My Computer: fro
9.6 Critical severity
Pardus Software Center: Improper Limitation of a Pathname to a Restricted Directory
CVE-2026-5166Apr 29, 2026TUBITAK BILGEM Software Technologies Research Institute
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus Software Center allows Path Traversal. This issue affects Pardus Software Center: before 0.6.4.
8.8 High severity
Pardus About: Improper Link Resolution Before File Access
CVE-2026-5161Apr 29, 2026TUBITAK BILGEM Software Technologies Research Institute
Improper link resolution before file access ('link following') vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus About allows Symlink Attack. This issue affects Pardus About: before 1.2.2.
8.8 High severity
Pardus Software Center: Incorrect Privilege Assignment
CVE-2026-5141Apr 29, 2026TUBITAK BILGEM Software Technologies Research Institute
Improper Privilege Management, Improper Access Control, Incorrect privilege assignment vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus Software Center allows Hijacking a privileged process. This issue affects Pardus Software Cen
8.8 High severity
Pardus Update: Improper Neutralization of CRLF Sequences
CVE-2026-5140Apr 29, 2026TUBITAK BILGEM Software Technologies Research Institute
Improper neutralization of CRLF sequences ('CRLF injection') vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus Update allows Authentication Bypass. This issue affects Pardus Update: from 0.6.3 before 0.6.4.
7.5 High severity
Liderahenk: Missing Authentication for Critical Functionality
CVE-2026-2339Mar 10, 2026TUBITAK BILGEM Software Technologies Research Institute
Missing Authentication for Critical Function vulnerability in TUBITAK BILGEM Software Technologies Research Institute Liderahenk allows Remote Code Inclusion, Privilege Abuse, Command Injection. This issue affects Liderahenk: before 3.5.1.