CVE-2026-8301

HighCVSS 7.8

Published: 11/09/2026(UTC)Updated: 11/09/2026(UTC)Translated: 11/09/2026(UTC)NVD NIST

Summary

An OS Command Injection vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus Boot Repair. The product does not properly neutralize special elements used in OS commands. This issue affects versions before 1.0.8.

Risk Assessment

An attacker could inject and execute arbitrary OS commands, potentially leading to full system compromise. The risk is especially high if the tool runs with root privileges.

Recommendation

Update Pardus Boot Repair to version 1.0.8 or later. Restrict access to the tool to trusted administrators only.

Other vulnerabilities in Pardus Boot Repair

CVE-2026-19702High
Pardus Boot Repair (TÜBİTAK BİLGEM product) has an OS command injection vulnerability due to improper neutralization of special elements. Affects versions from 1.0.7 before 1.0.8.

Original NVD description (English source)

Improper neutralization of special elements used in an OS command ('OS command injection') vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus Boot Repair allows OS Command Injection. This issue affects Pardus Boot Repair: before 1.0.8.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS