CVE-2026-19702

HighCVSS 7.8

Published: 31/08/2026(UTC)Updated: 01/09/2026(UTC)Translated: 31/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.49%

40th percentile - higher than 40% of all known CVEs

Summary

Pardus Boot Repair (TÜBİTAK BİLGEM product) has an OS command injection vulnerability due to improper neutralization of special elements. Affects versions from 1.0.7 before 1.0.8.

Risk Assessment

An attacker can execute arbitrary system commands, potentially leading to full system compromise or data corruption.

Recommendation

Update Pardus Boot Repair to version 1.0.8 or later.

Other vulnerabilities in Pardus Boot Repair

CVE-2026-8301High
An OS Command Injection vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus Boot Repair. The product does not properly neutralize special elements used in OS commands. This issue affects versions before 1.0.8.

Original NVD description (English source)

Improper neutralization of special elements used in an OS command ('OS command injection') vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute Pardus Boot Repair allows OS Command Injection. This issue affects Pardus Boot Repair: from 1.0.7 before 1.0.8.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS