CVE-2026-5140

Improper neutralization of CRLF sequences ('CRLF injection') vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus Update allows Authentication Bypass. This issue affects Pardus Update: from 0.6.3 before 0.6.4.

Score

CVSS 3.1 8.8 High

Status

Deferred - iletisim@usom.gov.tr

Published

2026-04-29

Last modified

2026-10-26

Weaknesses

CWE-93

Affected products

• Pardus Update (Tubitak Bilgem Software Technologies Research Institute)

References

• https://www.usom.gov.tr/bildirim/tr-26-0131
• https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0131