Sensitive Information Exposure in Pardus Domain Joiner by TUBITAK BILGEM
CVE-2026-12250

7.9HIGH

Key Information:

Vendor

Tubitak Bilgem Software Technologies Research Institute

Status
Pardus Domain Joiner
Vendor
CVE Published:
5 July 2026

What is CVE-2026-12250?

The Pardus Domain Joiner by TUBITAK BILGEM is affected by a vulnerability that allows for the invocation of processes using sensitive information that may be visible to unauthorized users. This flaw potentially exposes system configurations and sensitive data during domain join operations. Affected versions include 0.5.2 and 0.5.3, thus highlighting the need for users to upgrade to mitigate risks associated with data exposure and maintain secure operations.

Affected Version(s)

Pardus Domain Joiner 0.5.2 < 0.5.4

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/...
government-resource

CVSS V3.1

Score:
7.9
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Tacettin KARADENÄ°Z
.