CVE-2026-11765

Improper neutralization of argument delimiters in a command ('argument injection') vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus Pen allows Argument Injection. This issue affects Pardus Pen: before 4.2.1.

The ability to inject arguments into a command may allow an attacker to perform unauthorized operations or manipulate application behavior. The risk affects systems running a vulnerable version of Pardus Pen.

Update Pardus Pen to version 4.2.1 or later, which contains the fix. Until updating, avoid processing untrusted input through vulnerable functions.