CVE-2026-14459
HighCVSS 8.8Exploitation Probability (EPSS)
Low risk11th percentile - higher than 11% of all known CVEs
Summary
An argument injection vulnerability in TUBITAK BILGEM's pardus-software allows attackers to inject additional arguments into commands. The issue affects versions up to 1.0.4 and is fixed in version 1.0.5.
Risk Assessment
An attacker could inject extra arguments into system commands, potentially leading to unauthorized code execution or privilege escalation.
Recommendation
Immediately update pardus-software to version 1.0.5 or later.
Other vulnerabilities in pardus-software
See all- CVE-2026-7863High
An OS Command Injection vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus Software. The product does not properly neutralize special elements used in OS commands. This issue affects versions before 1.0.5.
- CVE-2026-8303High
An incorrect privilege assignment vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus-software. It allows privilege escalation. This issue affects versions before 1.0.5.
- CVE-2026-14460High
Missing authorization in TUBITAK BILGEM's pardus-software allows argument injection. The vulnerability affects versions 1.0.4 and earlier, before version 1.0.5.
Original NVD description (English source)
Improper neutralization of argument delimiters in a command ('argument injection') vulnerability in TUBITAK BILGEM Software Technologies Research Institute pardus-software allows Argument Injection. This issue affects pardus-software: from <= 1.0.4 before 1.0.5.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS