CVE-2026-18806

HIGH CVSS 7.1 View on NVD ↗

Description

External control of file name or path vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute pardus-image-writer allows Removing Important Client Functionality. This issue affects pardus-image-writer: before 1.0.4.

CVSS Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0740

Published: Aug 04, 2026 13:17 UTC Modified: Aug 04, 2026 17:16 UTC