{"id":"CVE-2026-11765","aliases":["EUVD-2026-76102","GHSA-8jgw-pvr8-c8v3"],"status":"published","title":"Argument Injection in TUBITAK BILGEM's Pardus Pen","description":"Improper neutralization of argument delimiters in a command ('argument injection') vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus Pen allows Argument Injection.\n\nThis issue affects Pardus Pen: before 4.2.1.","severity":{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","level":"low","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.00171,"percentile":0.06586,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-88"],"published":"2026-09-11T13:20:11Z","modified":"2026-09-11T15:32:48Z","products":[{"vendor":"tubitak bilgem software technologies research institute","product":"pardus pen"}],"references":[{"url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1079","tags":["government-resource"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-11765"},{"url":"https://github.com/advisories/GHSA-8jgw-pvr8-c8v3"}],"sources":{"cve":[{"id":"CVE-2026-11765","title":"Argument Injection in TUBITAK BILGEM's Pardus Pen","description":"Improper neutralization of argument delimiters in a command ('argument injection') vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus Pen allows Argument Injection.\n\nThis issue affects Pardus Pen: before 4.2.1.","status":"published","published":"2026-09-11T13:20:11.368Z","modified":"2026-09-11T13:57:41.01Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","level":"low","assessor":"cna"}],"cwes":["CWE-88"],"updated_at":"2026-11-02T14:20:04.463704Z"}],"euvd":[{"id":"EUVD-2026-76102","description":"Improper neutralization of argument delimiters in a command ('argument injection') vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus Pen allows Argument Injection.\n\nThis issue affects Pardus Pen: before 4.2.1.","status":"published","published":"2026-09-11T13:20:11Z","modified":"2026-09-11T13:57:41Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","level":"low"}],"updated_at":"2026-11-02T17:28:22.567961Z"}],"ghsa":[{"id":"GHSA-8jgw-pvr8-c8v3","title":"Improper neutralization of argument delimiters in a command ('argument injection') vulnerability...","description":"Improper neutralization of argument delimiters in a command ('argument injection') vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus Pen allows Argument Injection.\n\nThis issue affects Pardus Pen: before 4.2.1.","status":"published","published":"2026-09-11T15:32:40Z","modified":"2026-09-11T15:32:48Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","level":"low"}],"cwes":["CWE-88"],"updated_at":"2026-11-02T15:11:45.091927Z"}],"nvd":[{"id":"CVE-2026-11765","description":"Improper neutralization of argument delimiters in a command ('argument injection') vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus Pen allows Argument Injection.\n\nThis issue affects Pardus Pen: before 4.2.1.","status":"published","published":"2026-09-11T14:17:23.71Z","modified":"2026-09-11T14:46:12.73Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","level":"low","assessor":"primary"}],"cwes":["CWE-88"],"updated_at":"2026-11-02T14:12:46.271848Z"}]}}