Privilege Escalation in TÜBİTAK BİLGEM's Pardus Image Writer Software
CVE-2026-92083

7.8HIGH

Key Information:

Vendor

Tübi̇tak Bi̇lgem Yazılım Teknolojileri Araştırma Enstitüsü

Status
Pardus-image-writer
Vendor
CVE Published:
12 November 2026

What is CVE-2026-92083?

The missing authorization vulnerability in TÜBİTAK BİLGEM's pardus-image-writer allows attackers to exploit the software before version 0.9.0, resulting in potential privilege escalation. This flaw could enable unauthorized users to gain elevated access, compromising application security and user data.

Affected Version(s)

pardus-image-writer 0 < 0.9.0

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/...
government-resource

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Utku Ceylan
.