CVE-2026-14460
HighCVSS 8.8Exploitation Probability (EPSS)
Low risk5th percentile - higher than 5% of all known CVEs
Summary
Missing authorization in TUBITAK BILGEM's pardus-software allows argument injection. The vulnerability affects versions 1.0.4 and earlier, before version 1.0.5.
Risk Assessment
An attacker can exploit the missing authorization to perform unauthorized operations on the system, potentially leading to privilege escalation or data integrity compromise.
Recommendation
Immediately update pardus-software to version 1.0.5 or later, which includes a fix for the vulnerability.
Other vulnerabilities in pardus-software
See all- CVE-2026-7863High
An OS Command Injection vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus Software. The product does not properly neutralize special elements used in OS commands. This issue affects versions before 1.0.5.
- CVE-2026-8303High
An incorrect privilege assignment vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus-software. It allows privilege escalation. This issue affects versions before 1.0.5.
- CVE-2026-14459High
An argument injection vulnerability in TUBITAK BILGEM's pardus-software allows attackers to inject additional arguments into commands. The issue affects versions up to 1.0.4 and is fixed in version 1.0.5.
Original NVD description (English source)
Missing Authorization vulnerability in TUBITAK BILGEM Software Technologies Research Institute pardus-software allows Argument Injection. This issue affects pardus-software: from <= 1.0.4 before 1.0.5.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS