CVE-2026-102568

MEDIUM 5.5

Pardus Parental Control before 0.7.0 Incorrect Authorization via PPCActivator.py

CVSS Score

5.5

EPSS Score

0.0%

EPSS Percentile

0th

Pardus Parental Control before 0.7.0 contains an incorrect authorization vulnerability in the polkit policy that allows unprivileged local users to disable parental controls as root. Attackers can invoke PPCActivator.py with the --disable argument via pkexec to remove all restrictions including DNS filtering and application limits without authentication.

CWE	CWE-863
Vendor	pardus
Product	pardus-parental-control
Published	Sep 29, 2026

Stay Ahead of the Next One

Get instant alerts for pardus pardus-parental-control

Be the first to know when new medium vulnerabilities affecting pardus pardus-parental-control are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

High

Availability

None

Affected Versions

pardus / pardus-parental-control

0 < 0.7.0

References

NVD ↗ CVE.org ↗ EPSS Data ↗

github.com: https://github.com/pardus/pardus-parental-control/pull/5 github.com: https://github.com/pardus/pardus-parental-control/commit/42d8373b6b8d9bf348e9378fb6ad4a2750d503e7 github.com: https://github.com/pardus/pardus-parental-control/blob/4045f9513fa2d19ad9dbee25b39acb55a018c58e/polkit/tr.org.pardus.pkexec.parental-control.policy#L9-L21 github.com: https://github.com/pardus/pardus-parental-control/releases/tag/debian%2F0.7.0 github.com: https://github.com/pardus/pardus-parental-control vulncheck.com: https://www.vulncheck.com/advisories/pardus-parental-control-before-0.7.0-incorrect-authorization-via-ppcactivator-py

Credits

Yunus Aydın