OS Command Injection Vulnerability in TUBITAK Pardus Software
CVE-2026-7863

8.4HIGH

Key Information:

Vendor

Tubitak Bilgem Software Technologies Research Institute

Status
Pardus Software
Vendor
CVE Published:
11 September 2026

What is CVE-2026-7863?

An OS command injection vulnerability exists in TUBITAK Pardus Software, which could allow attackers to execute arbitrary commands on the host system. This issue affects versions released prior to 1.0.5, where improper neutralization of special elements used in OS commands was identified. Exploiting this vulnerability could compromise system integrity and lead to unauthorized actions being performed by an attacker.

Affected Version(s)

Pardus Software 0 < 1.0.5

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/...
government-resource

CVSS V3.1

Score:
8.4
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Muhammed KAYA
.