Permissive Input Validation Flaw in TÜBİTAK BİLGEM pardus-nvidia-installer
CVE-2026-16478

7HIGH

Key Information:

Vendor

Tübi̇tak Bi̇lgem Software Technologies Research Institute

Status
Pardus-nvidia-installer
Vendor
CVE Published:
10 November 2026

What is CVE-2026-16478?

The TÜBİTAK BİLGEM software, specifically the pardus-nvidia-installer, is vulnerable due to a permissive list of allowed inputs. This flaw can be exploited to achieve privilege escalation, enabling unauthorized users to gain elevated privileges within the system. This vulnerability affects versions of pardus-nvidia-installer prior to 2.0.1, highlighting the need for prompt updates and security practices to mitigate potential risks.

Affected Version(s)

pardus-nvidia-installer 0 < 2.0.1

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/...
government-resource

CVSS V3.1

Score:
7
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Namiq Bağırzadə
.