high
advisory
Pardus Boot Repair: OS Command Injection (CVE-2026-94434)
An OS command injection vulnerability exists in TÜBİTAK BİLGEM Pardus Boot Repair, where improper neutralization of special elements used in an OS command allows OS command injection.
CVE search metadata
CVE search record: CVE-2026-94434. Severity: high. CVSS: 8.8. KEV: no. Product: Pardus Boot Repair (1.0.8 before 1.0.9). Brief: Pardus Boot Repair: OS Command Injection (CVE-2026-94434). Brief link: https://feed.craftedsignal.io/briefs/2026-11-pardus-boot-repair-injection/
Triage facts
Revision 1- Applicability
- Pardus Boot Repair (1.0.8 before 1.0.9)
- Evidence
- Unknown
- Severity
- High
- Sources
- 1 public source
- Freshness
- Revision 1Nov 9, 15:50 UTC
- Vulnerabilities
- 1 CVE
- Source quality
- A2Roughly even chance
CVE-2026-94434 affects Pardus Boot Repair versions from 1.0.8 before 1.0.9. The vulnerability is caused by improper neutralization of special elements used in an OS command.