Missing Authorization Vulnerability in Pardus Update by TUBITAK
CVE-2026-6509

7.8HIGH

Key Information:

Vendor: Tubitak Bilgem Software Technologies Research Institute
Status: Pardus Update
Vendor: CVE Published:; 5 July 2026

🔔 Create Tubitak Bilgem Software Technologies Research Institute Vulnerability Alert

What is CVE-2026-6509?

A missing authorization vulnerability in Pardus Update from TUBITAK BILGEM allows attackers to exploit the system and gain unauthorized access. This issue affects versions up to and including 0.6.3 and prior to version 0.6.6, enabling potential privilege escalation risks. Users are advised to upgrade to the latest version to mitigate this vulnerability and protect their systems from exploitation.

Affected Version(s)

Pardus Update <=0.6.3 < 0.6.6

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/...

government-resource

CVSS V3.1

Score:

7.8

Severity:

HIGH

Confidentiality:

High

Integrity:

High

Availability:

High

Attack Vector:

Local

Attack Complexity:

Low

Privileges Required:

Low

User Interaction:

None

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Jul 5, 2026
Vulnerability Reserved
Apr 17, 2026

Credit

Mehmet DEMİR

CVE-2026-6509 Data

JSON