CVE-2026-16287

HighCVSS 7.8

Published: 23/07/2026(UTC)Updated: 23/07/2026(UTC)Translated: 24/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

0.84%

54th percentile - higher than 54% of all known CVEs

Summary

OS command injection vulnerability in TUBITAK BILGEM pardus-update allows remote command execution.

Risk Assessment

An attacker can execute arbitrary system commands, potentially leading to full system compromise.

Recommendation

Update pardus-update to version 0.7.0 or later.

Other vulnerabilities in pardus-update

CVE-2026-6509High
Missing authorization in Pardus Update allows privilege escalation. The vulnerability affects versions 0.6.3 and earlier, fixed in version 0.6.6.

Original NVD description (English source)

Improper neutralization of special elements used in an OS command ('OS command injection') vulnerability in TUBITAK BILGEM Software Technologies Research Institute pardus-update allows OS Command Injection. This issue affects pardus-update: from 0.6.6 before 0.7.0.