CVE-2026-5161: Improper Authentication in TUBITAK BILGEM's Pardus About

Severity: high (CVSS 8.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-04-29 · updated 2026-10-26
Weakness: CWE-59

Description

Improper link resolution before file access ('link following') vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus About allows Symlink Attack. This issue affects Pardus About: before 1.2.2.

Affected products

TUBITAK BILGEM Software Technologies Research Institute Pardus About: before 1.2.2 — fixed in 1.2.2

How to fix

Upgrade to a fixed version: TUBITAK BILGEM Software Technologies Research Institute Pardus About 1.2.2. Check the vendor advisory for mitigations.

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0131
https://www.usom.gov.tr/bildirim/tr-26-0131

Get alerted when CVE-2026-5161 or the next vulnerability affects your stack