Skip to content
Threat Feed
Subscribe

Vendor

TUBITAK BILGEM Software Technologies Research Institute

9 briefs RSS
high advisory

Deserialization Vulnerability in eta-otp-lock

An insecure deserialization vulnerability in TUBITAK BILGEM eta-otp-lock (CVE-2026-18642) allows unauthenticated attackers to perform object injection, potentially leading to remote code execution.

eta-otp-lock
1t 1c
high threat

OS Command Injection Vulnerability in Pardus-Update (CVE-2026-16287)

A high-severity OS command injection vulnerability, tracked as CVE-2026-16287, has been identified in the TUBITAK BILGEM Software Technologies Research Institute's pardus-update software, affecting versions from 0.6.6 before 0.7.0, enabling attackers to execute arbitrary operating system commands due to improper neutralization of special elements.

exploited pardus-update os-command-injection vulnerability linux
1t 1c 1i
high advisory

CVE-2026-9085: Incorrect Permissions Allow DNS Spoofing in Pardus-Parental-Control

An Improper Access Control and Incorrect Permission Assignment vulnerability (CVE-2026-9085) in TUBITAK BILGEM's Pardus-Parental-Control software, affecting versions up to 0.5.1 and all versions before 0.7.0, allows a local attacker to perform DNS Spoofing.

Pardus-Parental-Control dns-spoofing access-control linux vulnerability
1c
high threat

CVE-2026-6509 — Missing Authorization Vulnerability in Pardus Update Allows Privilege Escalation

A Missing Authorization vulnerability (CVE-2026-6509) in TUBITAK BILGEM Software Technologies Research Institute's Pardus Update software allows a local, low-privileged attacker to escalate privileges on affected Pardus Linux systems by bypassing authorization checks in versions up to and including 0.6.3.

exploited Pardus Update privilege-escalation linux vulnerability cve
1t 1c
high advisory

CVE-2026-12250: Pardus Domain Joiner Vulnerability Exposes Sensitive Information

A high-severity vulnerability, CVE-2026-12250, in TUBITAK BILGEM Software Technologies Research Institute's Pardus Domain Joiner (versions 0.5.2 before 0.5.4) allows local attackers to excavate sensitive information by observing process invocations that expose credentials or other confidential data.

Pardus Domain Joiner 0.5.2 +1 vulnerability linux data-exposure pardus
1c
high advisory

CVE-2026-14460: Missing Authorization and Argument Injection in TUBITAK BILGEM Pardus-Software

A Missing Authorization vulnerability, identified as CVE-2026-14460, in TUBITAK BILGEM Software Technologies Research Institute's pardus-software versions up to 1.0.4, allows for Argument Injection, posing a high severity risk to confidentiality, integrity, and availability.

pardus-software vulnerability CVE linux
1c
high advisory

CVE-2026-14459: Argument Injection Vulnerability in TUBITAK BILGEM pardus-software

A critical argument injection vulnerability (CVE-2026-14459) in TUBITAK BILGEM Software Technologies Research Institute's pardus-software versions up to 1.0.4 allows a local, low-privileged attacker to achieve unauthorized command execution, severely impacting confidentiality, integrity, and availability.

PoC pardus-software +1 vulnerability argument-injection linux cve
1t 2c 2i
critical advisory

Pardus Software Center Path Traversal Vulnerability (CVE-2026-5166)

CVE-2026-5166 is a path traversal vulnerability affecting TUBITAK BILGEM Software Technologies Research Institute Pardus Software Center before version 1.0.3, allowing attackers to bypass directory restrictions.

Pardus Software Center cve-2026-5166 path-traversal web-application
2r 1t 1c
critical advisory

Pardus OS My Computer OS Command Injection Vulnerability (CVE-2026-6849)

CVE-2026-6849 is an OS Command Injection vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus OS My Computer versions <=0.7.5 before 0.8.0, allowing an attacker to execute arbitrary OS commands due to improper neutralization of special elements.

Pardus OS My Computer cve-2026-6849 os command injection pardus os
1r 1t 1c