The vulnerability identified as CVE-2026-9085 in Pardus-Parental-Control is due to incorrect permission assignment for a critical resource, resulting in improper access control (CWE-732 and CWE-284). This weakness enables DNS spoofing attacks, potentially allowing an attacker with low privileges and no user interaction to cause a complete compromise of confidentiality, integrity, and availability. The affected versions are those up to and including 0.5.1, with the issue resolved in versions after 0.5.1 and before 0.7.0. There is no vendor advisory or patch link available at this time, and the remediation level is not specified.

Successful exploitation of this vulnerability can lead to DNS spoofing, which compromises the integrity and confidentiality of network communications. The CVSS 3.1 score of 8.8 reflects high impact on confidentiality, integrity, and availability. An attacker with low privileges can exploit this without user interaction, potentially redirecting network traffic or intercepting sensitive information.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or remediation level is provided, users should monitor for vendor updates and consider restricting access to the affected software versions. Avoid using versions up to and including 0.5.1 and upgrade to versions after 0.5.1 when an official fix is released.