Threat database

Incorrect Permission Assignment for Critical Resource vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute Pardus LightDM Greeter allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Pardus LightDM Greeter: before 0.4.15.

CVE-2026-19702 is an OS command injection vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute Pardus Boot Repair. It affects version 1.0.7 and allows improper neutralization of special elements used in OS commands. This vulnerability can lead to high impact on confidentiality, integrity, and availability. No official patch or remediation information is currently available.

CVE-2026-19271 is an LDAP Injection vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute's Liderahenk product. It affects versions from 3.4.0 up to but not including 3.5.5. The vulnerability involves improper neutralization of special elements in LDAP queries, which can lead to unauthorized information disclosure. The CVSS score is 7.5, indicating a high severity. No official patch or remediation guidance is currently provided by the vendor. There are no known exploits in the wild at this time.

CVE-2026-75896 is a critical vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute's Liderahenk product prior to version 3.5.5. It involves the use of hard-coded credentials, allowing attackers to use common or default usernames and passwords to gain unauthorized access. The vulnerability has a high CVSS score of 9.1, indicating severe confidentiality and integrity impacts without requiring user interaction or privileges. No official patch or remediation guidance is currently available from the vendor.

CVE-2026-15599 is an unverified ownership vulnerability in the pardus-domain-joiner software developed by TÜBİTAK BİLGEM Software Technologies Research Institute. This flaw allows privilege abuse due to improper verification of ownership. It affects versions prior to 0.5.5. The vulnerability has a low severity rating with a CVSS score of 3.3 and does not impact confidentiality or integrity but may affect availability. No official patch or remediation guidance has been published yet.

CVE-2026-18915 is a vulnerability in the eta-otp-lock software by TÜBİTAK BİLGEM Software Technologies Research Institute that involves invocation of a process using visible sensitive information. This flaw allows system footprinting and affects versions prior to 1.0.4. The vulnerability has a medium severity rating with a CVSS score of 5. There is no official patch or remediation level currently provided by the vendor.

External control of file name or path vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute pardus-image-writer allows Removing Important Client Functionality. This issue affects pardus-image-writer: before 0.9.0.