VULNERABILITY INTELLIGENCE
CVE-2026-18806
CVSS score7.1 HIGH
EPSS probability0.15%
CISA KEVNot currently listed
Published2026-08-04
Last modified2026-10-23
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
Description
External control of file name or path vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute pardus-image-writer allows Removing Important Client Functionality. This issue affects pardus-image-writer: before 0.9.0.
Weakness classification
- iletisim@usom.gov.tr: CWE-73