CVE-2026-87772
Unauthenticated Polkit Privilege Escalation in TÜBİTAK BİLGEM's Pardus About
CVE-2026-87772 is a high vulnerability (CVSS 7.8) in Tubitak Bilgem Software Technologies Research Institute Pardus About, published November 12, 2026. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 0.10%, the 0th percentile. No source names a fixed version.
- Severity
- 7.8 HighCVSS 3.1, CVE List
- Exploit chance
- 0.10%EPSS, 0th percentile
- Exploitation
- None known1 public exploit
- Fixed in
- No fix listedNo source names one
Description
Incorrect Authorization vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute Pardus About allows Privilege Escalation.
This issue affects Pardus About: before 1.2.5.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| PoC in GitHub | jankesec/CVE-2026-87772-pardus-about-lpe | 2026-11-12 |
What each source reports
CVE List Score used
Unauthenticated Polkit Privilege Escalation in TÜBİTAK BİLGEM's Pardus About
Incorrect Authorization vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute Pardus About allows Privilege Escalation.
This issue affects Pardus About: before 1.2.5.
- Record
CVE-2026-87772- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-863
- Updated
- 2026-11-12
EUVDEUVD-2026-124294
Incorrect Authorization vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute Pardus About allows Privilege Escalation.
This issue affects Pardus About: before 1.2.5.
- Record
EUVD-2026-124294- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-12
GitHub AdvisoriesGHSA-27h9-745x-3rgf
Incorrect Authorization vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute...
Incorrect Authorization vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute Pardus About allows Privilege Escalation.
This issue affects Pardus About: before 1.2.5.
- Record
GHSA-27h9-745x-3rgf- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-863
- Updated
- 2026-11-12
NVD
Incorrect Authorization vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute Pardus About allows Privilege Escalation.
This issue affects Pardus About: before 1.2.5.
- Record
CVE-2026-87772- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-863
- Updated
- 2026-11-12
History
| Recorded | Changed | Sources |
|---|---|---|
| exploits, facts | PoC in GitHub | |
| published | EUVD, NVD | |
| published | EUVD | |
| aliases, references | GitHub Advisories | |
| cwes, products, references, severity, title | CVE List | |
| first indexed | EUVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.