Race Condition Vulnerability in Pardus Package Installer by TÜBİTAK BİLGEM

CVE-2026-95518

What is CVE-2026-95518?

The Pardus Package Installer, developed by TÜBİTAK BİLGEM, has a race condition vulnerability that stems from improper handling of time-of-check versus time-of-use scenarios. This issue allows an attacker to exploit the timing of operations to gain unauthorized access or manipulate system resources. It affects versions from 0.7.0 to earlier than 0.7.1, making it crucial for users to update their systems to mitigate potential risks. For more details, refer to the official government security notice.

References