CVE-2026-14459highCWE-88

CVE-2026-14459: high-severity vulnerability in TUBITAK BILGEM Software Technologies Research…

Argument Injection in TUBITAK BILGEM's pardus-software

Published · Updated

41Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendcvss 8.8epss 0.2%
from disclosure to weapon0 days
Published on NVDJul 3
1st PoCJul 3
exploitation probability
0.2%top 90% of all CVEs
observed exploitation
nono source reports it
1 public exploit(s)
Improper neutralization of argument delimiters in a command ('argument injection') vulnerability in TUBITAK BILGEM Software Technologies Research Institute pardus-software allows Argument Injection. This issue affects pardus-software: from <= 1.0.4 before 1.0.5.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Related CVEs — TUBITAK BILGEM Software Technologies Research…

In the same product, most dangerous first.