Path Traversal Vulnerability in pardus-boot-repair by TÜBİTAK BİLGEM
CVE-2026-105422

6.6MEDIUM

Key Information:

Vendor

Tübi̇tak Bi̇lgem Software Technologies Research Institute

Status
Pardus-boot-repair
Vendor
CVE Published:
6 November 2026

What is CVE-2026-105422?

The pardus-boot-repair application developed by TÜBİTAK BİLGEM contains a Path Traversal vulnerability that allows attackers to bypass restrictions and access unauthorized directories. This issue is present in versions 1.0.9 up to, but not including, 1.1.0, which could lead to unauthorized file access and potential data exposure.

Affected Version(s)

pardus-boot-repair 1.0.9 < 1.1.0

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/...
government-resource

CVSS V3.1

Score:
6.6
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Physical
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Recep Yağmur
.