Vulnerability · Published Apr 29, 2026 · Assigned by TR-CERT

CVE-2026-5141Improper Access Control in TUBITAK BILGEM's Pardus Software Center

High 8.8

In plain English

A high-severity privilege mismanagement in Pardus Software Center from TUBITAK BILGEM Software Technologies Research Institute. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 14% of all known vulnerabilities).

Severity (CVSS 3.1)8.8High

Exploit odds (30 days)0.2%top 86.3% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

Improper Privilege Management, Improper Access Control, Incorrect privilege assignment vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus Software Center allows Hijacking a privileged process. This issue affects Pardus Software Center: from 1.0.2 before 1.0.3.

Affected products (as reported)

Vendor	Product	Versions
TUBITAK BILGEM Software Technologies Research Institute	Pardus Software Center	1.0.2 – before 1.0.3

Weakness: CWE-269, CWE-284, CWE-266 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

References

https://www.usom.gov.tr/bildirim/tr-26-0131 government-resource, broken-link
https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0131 government-resource