Missing Authorization Vulnerability in TUBITAK BILGEM Pardus About
CVE-2026-8304

5.5MEDIUM

Key Information:

Vendor: Tubitak Bilgem Software Technologies Research Institute
Status: Pardus About
Vendor: CVE Published:; 11 September 2026

🔔 Create Tubitak Bilgem Software Technologies Research Institute Vulnerability Alert

What is CVE-2026-8304?

A missing authorization vulnerability in TUBITAK BILGEM's Pardus About allows attackers to exploit improperly configured access control security levels. This flaw affects versions 1.2.1 through 1.2.4, enabling unauthorized users to access sensitive functionalities within the software. Proper configuration and security measures are essential to mitigate potential risks associated with this vulnerability.

Affected Version(s)

Pardus About 1.2.1 < 1.2.5

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/...

government-resource

CVSS V3.1

Score:

5.5

Severity:

MEDIUM

Confidentiality:

High

Integrity:

None

Availability:

High

Attack Vector:

Local

Attack Complexity:

Low

Privileges Required:

Low

User Interaction:

None

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Sep 11, 2026
Vulnerability Reserved
May 11, 2026

Credit

Devran ATUĞ

CVE-2026-8304 Data

JSON