Vulnerability · Published Sep 9, 2026 · Assigned by TR-CERT

CVE-2026-79617Improper Access Control Leading to Display Exposure in TÜBİTAK BİLGEM's Pardus LightDM Greeter

High 7.1

In plain English

A high-severity incorrect permission assignment in Pardus LightDM Greeter from TÜBİTAK BİLGEM Software Technologies Research Institute. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.1% (higher than 4% of all known vulnerabilities). Ready-made attack tooling exists: public proof-of-concept code.

Severity (CVSS 3.1)7.1High

Exploit odds (30 days)0.1%top 96.4% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack tooling1Public PoC

Official description

Incorrect Permission Assignment for Critical Resource vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute Pardus LightDM Greeter allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Pardus LightDM Greeter: before 0.4.15.

Affected products (as reported)

Vendor	Product	Versions
TÜBİTAK BİLGEM Software Technologies Research Institute	Pardus LightDM Greeter	0 – before 0.4.15

Weakness: CWE-732 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1051 government-resource