CVE-2026-7863
HighCVSS 8.4Summary
An OS Command Injection vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus Software. The product does not properly neutralize special elements used in OS commands. This issue affects versions before 1.0.5.
Risk Assessment
An attacker could inject and execute arbitrary OS commands on the server, potentially leading to full system compromise. The risk is especially high if the application runs with elevated privileges.
Recommendation
Update Pardus Software to version 1.0.5 or later. Until patched, restrict access to the application and verify it does not run with excessive privileges.
Other vulnerabilities in Pardus Software
See all- CVE-2026-8303High
An incorrect privilege assignment vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus-software. It allows privilege escalation. This issue affects versions before 1.0.5.
- CVE-2026-14460High
Missing authorization in TUBITAK BILGEM's pardus-software allows argument injection. The vulnerability affects versions 1.0.4 and earlier, before version 1.0.5.
- CVE-2026-14459High
An argument injection vulnerability in TUBITAK BILGEM's pardus-software allows attackers to inject additional arguments into commands. The issue affects versions up to 1.0.4 and is fixed in version 1.0.5.
Original NVD description (English source)
Improper neutralization of special elements used in an OS command ('OS command injection') vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus Software allows OS Command Injection. This issue affects Pardus Software: before 1.0.5.