anonhaven

CVE-2026-8303

HIGH CVSS 3.1: 7.8 EPSS 0.12%
Updated Sep 11, 2026
Tubitak Bilgem Software Technologies Research Institute
Parameter Value
CVSS 7.8 (HIGH)
Affected Versions before 1.0.5.
Type CWE-266 (Incorrect Privilege Assignment)
Vendor Tubitak Bilgem Software Technologies Research Institute
Public PoC No

Incorrect privilege assignment vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus-software allows Privilege Escalation. This issue affects Pardus-software: before 1.0.5.

Attack Parameters

Attack Vector
Local
Requires local access
Attack Complexity
Low
Easy to exploit
Privileges Required
Low
Basic privileges needed
User Interaction
None
No user interaction needed

Impact Assessment

Confidentiality
High
Complete data leak
Integrity
High
Complete data modification
Availability
High
Complete denial of service

CVSS Vector v3.1

Weakness Type (CWE)

CWE-266 Incorrect Privilege Assignment

Vulnerable Products

tubitak bilgem software technologies research institute:pardus-software

References 1

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1080
NVD
Share Post Share Share Share

Related Vulnerabilities

CVE-2026-11765

Tubitak Bilgem Software Technologies Research Institute

3.3