CVE-2026-14460

HighCVSS 8.8

Published: 03/07/2026(UTC)Updated: 06/07/2026(UTC)Translated: 07/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.16%

6th percentile - higher than 6% of all known CVEs

Summary

Missing authorization in TUBITAK BILGEM's pardus-software allows argument injection. The vulnerability affects versions 1.0.4 and earlier, before version 1.0.5.

Risk Assessment

An attacker can exploit the missing authorization to perform unauthorized operations on the system, potentially leading to privilege escalation or data integrity compromise.

Recommendation

Immediately update pardus-software to version 1.0.5 or later, which includes a fix for the vulnerability.

Other vulnerabilities in pardus-software

CVE-2026-14459High
An argument injection vulnerability in TUBITAK BILGEM's pardus-software allows attackers to inject additional arguments into commands. The issue affects versions up to 1.0.4 and is fixed in version 1.0.5.

Original NVD description (English source)

Missing Authorization vulnerability in TUBITAK BILGEM Software Technologies Research Institute pardus-software allows Argument Injection. This issue affects pardus-software: from <= 1.0.4 before 1.0.5.