CVE-2026-12250

HighCVSS 7.9

Published: 05/07/2026(UTC)Updated: 06/07/2026(UTC)Translated: 07/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.11%

1th percentile - higher than 1% of all known CVEs

Summary

A vulnerability in Pardus Domain Joiner allows sensitive information exposure during process invocation. Affected versions are from 0.5.2 before 0.5.4, enabling data excavation.

Risk Assessment

The organization risks leakage of confidential data such as passwords or keys, potentially leading to unauthorized system access.

Recommendation

Immediately update Pardus Domain Joiner to version 0.5.4 or later, which includes the fix.

Other vulnerabilities in Pardus Domain Joiner

CVE-2026-15599Low
An unverified ownership vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute pardus-domain-joiner allows Privilege Abuse. This issue affects pardus-domain-joiner before 0.5.5.

Original NVD description (English source)

Invocation of process using visible sensitive information vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus Domain Joiner allows Excavation. This issue affects Pardus Domain Joiner: from 0.5.2 before 0.5.4.