CVE-2026-5166

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus Software Center allows Path Traversal. This issue affects Pardus Software Center: before 0.6.4.

Score

CVSS 3.1 9.6 Critical

Status

Deferred - iletisim@usom.gov.tr

Published

2026-04-29

Last modified

2026-10-26

Weaknesses

CWE-22

Affected products

• Pardus Software Center (Tubitak Bilgem Software Technologies Research Institute)

References

• https://www.usom.gov.tr/bildirim/tr-26-0131
• https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0131