CVE-2026-5161 is a vulnerability classified under CWE-59 (Improper Link Resolution Before File Access) affecting Pardus About software prior to version 1.2.1. The issue allows an attacker to exploit symbolic link handling to perform unauthorized file access or modification, commonly referred to as a symlink attack. The vulnerability is remotely exploitable without privileges and requires user interaction. The CVSS 3.1 score of 8.8 reflects its high severity with network attack vector, low attack complexity, no privileges required, user interaction needed, and high impact on confidentiality, integrity, and availability.

Successful exploitation of this vulnerability could lead to unauthorized disclosure, modification, or deletion of files due to improper handling of symbolic links. This compromises the confidentiality, integrity, and availability of the affected system. Since the attack requires user interaction, the risk depends on user behavior. No known exploits are reported in the wild, but the high CVSS score indicates a significant potential impact.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should exercise caution when interacting with untrusted files or links in Pardus About. Monitoring vendor channels for updates is recommended.