CVE-2026-6849

Improper neutralization of special elements used in an OS command ('OS command injection') vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus OS My Computer allows OS Command Injection. This issue affects Pardus OS My Computer: from <=0.7.5 before 0.8.0.

CVSS v3 8.8 HIGH

8.8^/10

CVSS v3 : HIGH

Vector :

Exploitability : 2.8 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0131
https://www.usom.gov.tr/bildirim/tr-26-0131

Configurations

No configuration.

History

26 Oct 2026, 20:10

Type	Values Removed	Values Added
Summary		(es) Vulnerabilidad de neutralización incorrecta de elementos especiales utilizados en un comando del SO (’inyección de comandos del SO’) en el Instituto de Investigación de Tecnologías de Software TUBITAK BILGEM Pardus OS Mi Equipo permite la inyección de comandos del SO. Este problema afecta a Pardus OS Mi Equipo: desde menor o igual que 0.7.5 antes de 0.8.0.

Information

Published : 2026-04-29 16:16

Updated : 2026-10-26 20:10

NVD link : CVE-2026-6849

Mitre link : CVE-2026-6849

CVE.ORG link : CVE-2026-6849

JSON object : View

Products Affected

No product.

CWE

CWE-78

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

{"id": "CVE-2026-6849", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-6849", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2026-04-29T15:35:34.305356Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "iletisim@usom.gov.tr", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.8, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 2.8}]}, "affected": [{"source": "iletisim@usom.gov.tr", "affectedData": [{"vendor": "TUBITAK BILGEM Software Technologies Research Institute", "product": "Pardus OS My Computer", "versions": [{"status": "affected", "version": "<=0.7.5", "lessThan": "0.8.0", "versionType": "custom"}], "defaultStatus": "unaffected"}]}], "published": "2026-04-29T16:16:28.413", "references": [{"url": "https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0131", "source": "iletisim@usom.gov.tr"}, {"url": "https://www.usom.gov.tr/bildirim/tr-26-0131", "source": "iletisim@usom.gov.tr"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "iletisim@usom.gov.tr", "description": [{"lang": "en", "value": "CWE-78"}]}], "descriptions": [{"lang": "en", "value": "Improper neutralization of special elements used in an OS command ('OS command injection') vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus OS My Computer allows OS Command Injection.\n\nThis issue affects Pardus OS My Computer: from <=0.7.5 before 0.8.0."}, {"lang": "es", "value": "Vulnerabilidad de neutralizaci\u00f3n incorrecta de elementos especiales utilizados en un comando del SO (\u2019inyecci\u00f3n de comandos del SO\u2019) en el Instituto de Investigaci\u00f3n de Tecnolog\u00edas de Software TUBITAK BILGEM Pardus OS Mi Equipo permite la inyecci\u00f3n de comandos del SO.\n\nEste problema afecta a Pardus OS Mi Equipo: desde menor o igual que 0.7.5 antes de 0.8.0."}], "lastModified": "2026-10-26T20:10:00.160", "sourceIdentifier": "iletisim@usom.gov.tr"}