CVE-2026-16287

CVSS Score & Metrics

Base Score

7.8 / 10

Vector String

                                        CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H                                    

Vulnerability Description

Improper neutralization of special elements used in an OS command ('OS command injection') vulnerability in TUBITAK BILGEM Software Technologies Research Institute pardus-update allows OS Command Injection.

This issue affects pardus-update: from 0.6.6 before 0.7.0.

Vulnerability Details

Published Date

July 23, 2026

Last Modified

July 23, 2026

CWE ID

CWE-78

Source

NVD

Vendor

TUBITAK BILGEM Software Technologies Research Institute

Product

pardus-update

External References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0609

CVSS Score & Metrics

Vulnerability Description

Vulnerability Details

External References

Discussion (0)

Add Comment