OS Command Injection in Pardus Boot Repair by TUBITAK BILGEM
CVE-2026-8301

7.8HIGH

Key Information:

Vendor: Tubitak Bilgem Software Technologies Research Institute
Status: Pardus Boot Repair
Vendor: CVE Published:; 11 September 2026

🔔 Create Tubitak Bilgem Software Technologies Research Institute Vulnerability Alert

What is CVE-2026-8301?

An OS command injection flaw exists in Pardus Boot Repair developed by TUBITAK BILGEM. This vulnerability enables attackers to send specially crafted commands to the underlying operating system, potentially compromising system integrity and security. The affected versions are prior to 1.0.8. Users are advised to upgrade to the latest version to mitigate risks associated with this vulnerability.

Affected Version(s)

Pardus Boot Repair 0 < 1.0.8

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/...

government-resource

CVSS V3.1

Score:

7.8

Severity:

HIGH

Confidentiality:

High

Integrity:

High

Availability:

High

Attack Vector:

Local

Attack Complexity:

Low

Privileges Required:

Low

User Interaction:

None

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Sep 11, 2026
Vulnerability Reserved
May 11, 2026

Credit

Devran ATUĞ

CVE-2026-8301 Data

JSON