CVE-2026-5166criticalCWE-22

CVE-2026-5166: critical vulnerability in TUBITAK BILGEM Software Technologies Research…

Path Traversal in TUBITAK BILGEM's Pardus Software Center

Published · Updated

Follow this CVE+ Monitor Pardus Software Center

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

28Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 9.6epss 0.3%
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus Software Center allows Path Traversal. This issue affects Pardus Software Center: before 0.6.4.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Affected products
TUBITAK BILGEM Software Technologies Research Institute · Pardus Software Center
Related CVEs — TUBITAK BILGEM Software Technologies Research…

In the same product, most dangerous first.

CVE-2026-5141HIGHImproper Access Control in TUBITAK BILGEM's Pardus Software CenterEPSS 0.2%