Race Condition Vulnerability in Pardus MyComputer by TÜBİTAK BİLGEM
CVE-2026-92606

6MEDIUM

Key Information:

Vendor

Tübi̇tak Bi̇lgem Software Technologies Research Institute

Status
Pardus Mycomputer
Vendor
CVE Published:
9 November 2026

What is CVE-2026-92606?

A time-of-check time-of-use (TOCTOU) race condition vulnerability exists in Pardus MyComputer developed by TÜBİTAK BİLGEM, potentially allowing unauthorized access and manipulation of system states. This issue impacts versions from 0.8.0 to prior 0.8.1, where the timing discrepancies between verification and execution can be exploited. Users are advised to update to the latest version to mitigate risks associated with this vulnerability.

Affected Version(s)

Pardus MyComputer 0.8.0 < 0.8.1

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/...
government-resource

CVSS V3.1

Score:
6
Severity:
MEDIUM
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Özcan Ersan
Serdar ÇATAL
.