CVE-2026-6509

HighCVSS 7.8

Published: 05/07/2026(UTC)Updated: 06/07/2026(UTC)Translated: 07/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.10%

1th percentile - higher than 1% of all known CVEs

Summary

Missing authorization in Pardus Update allows privilege escalation. The vulnerability affects versions 0.6.3 and earlier, fixed in version 0.6.6.

Risk Assessment

An attacker can exploit the missing authorization to gain elevated privileges, potentially leading to full system compromise.

Recommendation

Immediately update Pardus Update to version 0.6.6 or later.

Other vulnerabilities in Pardus Update

CVE-2026-16287High
OS command injection vulnerability in TUBITAK BILGEM pardus-update allows remote command execution.

Original NVD description (English source)

Missing Authorization vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus Update allows Privilege Escalation. This issue affects Pardus Update: from <=0.6.3 before 0.6.6.