This vulnerability (CVE-2026-7863) in Pardus Software is due to improper neutralization of special elements in OS commands, classified as CWE-78 (OS command injection). It allows an attacker to inject and execute arbitrary OS commands on affected systems. The affected versions are all versions before 1.0.5. The CVSS 3.1 vector indicates local attack vector with low attack complexity, no privileges required, no user interaction, and impacts confidentiality, integrity, and availability at a high level.

Successful exploitation can lead to full compromise of the affected system, including unauthorized disclosure, modification, or destruction of data, and disruption of system availability. The high CVSS score reflects the critical nature of the impact on system security.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, avoid using affected versions and apply standard OS command injection mitigations such as input validation and sanitization.