Vulnerability details
CVE-2026-5161
TUBITAK BILGEM Software Technologies Research Institute Pardus About
Improper Authentication in TUBITAK BILGEM's Pardus About
CVSS 3.1
8.8High
Official description
Improper link resolution before file access ('link following') vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus About allows Symlink Attack. This issue affects Pardus About: before 1.2.2.
CVSS scores
| Score | Version | Source | Vector |
|---|---|---|---|
| 8.8High | 3.1 | CVEProject cvelistV5 (CNA) (TR-CERT) | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
Affected products
| Vendor | Product | Versions | Source |
|---|---|---|---|
| TUBITAK BILGEM Software Technologies Research Institute | Pardus About | v < 1.2.2 | CVEProject cvelistV5 (CNA) |
References and advisories
2- https://www.usom.gov.tr/bildirim/tr-26-0131 government-resourcebroken-link
- https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0131 government-resource
Kolun on Telegram @kolunsec
Exploited CVEs, key news and a daily digest
Alerts for this product's next CVEsFollow the product to get new vulnerabilities on Telegram.
Details
- Published
- 2026-04-29
- Last updated
- 2026-06-06
- State
- Published
- Assigner (CNA)
- TR-CERT
Exploit prediction (EPSS)
0.32%
Probability of exploitation in 30 days
25.8%
Percentile (among all CVEs)
SSVC assessment (CISA)
- Automatable
- No
- Exploitation
- None
- Technical impact
- Total
Weaknesses (CWE)
- CWE-59Improper link resolution before file access ('link following')