CVE-2026-5141

Improper Privilege Management, Improper Access Control, Incorrect privilege assignment vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus Software Center allows Hijacking a privileged process. This issue affects Pardus Software Center: from 1.0.2 before 1.0.3.

CVSS v3 8.8 HIGH

8.8^/10

CVSS v3 : HIGH

Vector :

Exploitability : 2.8 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0131
https://www.usom.gov.tr/bildirim/tr-26-0131

Configurations

No configuration.

History

26 Oct 2026, 20:10

Type	Values Removed	Values Added
Summary		(es) Gestión de Privilegios Inadecuada, Control de Acceso Inadecuado, vulnerabilidad de asignación de privilegios incorrecta en el Centro de Software Pardus del Instituto de Investigación de Tecnologías de Software TUBITAK BILGEM permite el secuestro de un proceso privilegiado. Este problema afecta al Centro de Software Pardus: desde 1.0.2 antes de 1.0.3.

Information

Published : 2026-04-29 15:16

Updated : 2026-10-26 20:10

NVD link : CVE-2026-5141

Mitre link : CVE-2026-5141

CVE.ORG link : CVE-2026-5141

JSON object : View

Products Affected

No product.

CWE

CWE-266

Incorrect Privilege Assignment

CWE-269

Improper Privilege Management

CWE-284

Improper Access Control

{"id": "CVE-2026-5141", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-5141", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2026-04-29T15:05:44.609262Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "iletisim@usom.gov.tr", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.8, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 2.8}]}, "affected": [{"source": "iletisim@usom.gov.tr", "affectedData": [{"vendor": "TUBITAK BILGEM Software Technologies Research Institute", "product": "Pardus Software Center", "versions": [{"status": "affected", "version": "1.0.2", "lessThan": "1.0.3", "versionType": "custom"}], "defaultStatus": "unaffected"}]}], "published": "2026-04-29T15:16:07.887", "references": [{"url": "https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0131", "source": "iletisim@usom.gov.tr"}, {"url": "https://www.usom.gov.tr/bildirim/tr-26-0131", "source": "iletisim@usom.gov.tr"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "iletisim@usom.gov.tr", "description": [{"lang": "en", "value": "CWE-266"}, {"lang": "en", "value": "CWE-269"}, {"lang": "en", "value": "CWE-284"}]}], "descriptions": [{"lang": "en", "value": "Improper Privilege Management, Improper Access Control, Incorrect privilege assignment vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus Software Center allows Hijacking a privileged process.\n\nThis issue affects Pardus Software Center: from 1.0.2 before 1.0.3."}, {"lang": "es", "value": "Gesti\u00f3n de Privilegios Inadecuada, Control de Acceso Inadecuado, vulnerabilidad de asignaci\u00f3n de privilegios incorrecta en el Centro de Software Pardus del Instituto de Investigaci\u00f3n de Tecnolog\u00edas de Software TUBITAK BILGEM permite el secuestro de un proceso privilegiado.\n\nEste problema afecta al Centro de Software Pardus: desde 1.0.2 antes de 1.0.3."}], "lastModified": "2026-10-26T20:10:00.160", "sourceIdentifier": "iletisim@usom.gov.tr"}