🔐 CVE Alert

CVE-2026-92083

HIGH 7.8

Pardus Image Writer Local Privilege Escalation via Polkit Misconfiguration in TÜBİTAK BİLGEM's pardus-image-writer

CVSS Score
7.8
EPSS Score
0.0%
EPSS Percentile
0th

Missing Authorization vulnerability in TÜBİTAK BİLGEM Yazılım Teknolojileri Araştırma Enstitüsü pardus-image-writer allows Privilege Escalation. This issue affects pardus-image-writer: before 0.9.0.

CWE CWE-862
Vendor tübitak bilgem yazılım teknolojileri araştırma enstitüsü
Product pardus-image-writer
Published Nov 12, 2026
Stay Ahead of the Next One

Get instant alerts for tübitak bilgem yazılım teknolojileri araştırma enstitüsü pardus-image-writer

Be the first to know when new high vulnerabilities affecting tübitak bilgem yazılım teknolojileri araştırma enstitüsü pardus-image-writer are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

Affected Versions

TÜBİTAK BİLGEM Yazılım Teknolojileri Araştırma Enstitüsü / pardus-image-writer
0 < 0.9.0

References

NVD ↗ CVE.org ↗ EPSS Data ↗
siberguvenlik.gov.tr: https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1532

Credits

Utku Ceylan