Vulnerability details

CVE-2026-79617

TÜBİTAK BİLGEM Software Technologies Research Institute Pardus LightDM Greeter

Improper Access Control Leading to Display Exposure in TÜBİTAK BİLGEM's Pardus LightDM Greeter

CVSS 3.1

7.1High

Official description

Incorrect Permission Assignment for Critical Resource vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute Pardus LightDM Greeter allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Pardus LightDM Greeter: before 0.4.15.

CVSS scores

Score	Version	Source	Vector
7.1High	3.1	CVEProject cvelistV5 (CNA) (TR-CERT)	`CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N`

Affected products

Vendor	Product	Versions	Source
TÜBİTAK BİLGEM Software Technologies Research Institute	Pardus LightDM Greeter	v < 0.4.15	CVEProject cvelistV5 (CNA)

References and advisories

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1051 government-resource

Kolun on Telegram @kolunsec Exploited CVEs, key news and a daily digest Alerts for this product's next CVEsFollow the product to get new vulnerabilities on Telegram.

Details

Published: 2026-09-09
Last updated: 2026-09-09
State: Published
Assigner (CNA): TR-CERT

Exploit prediction (EPSS)

0.14%

Probability of exploitation in 30 days

3.5%

Percentile (among all CVEs)

SSVC assessment (CISA)

Automatable: No
Exploitation: None
Technical impact: Total

Weaknesses (CWE)

CWE-732
Incorrect Permission Assignment for Critical Resource