{"id":"CVE-2026-7863","aliases":["EUVD-2026-76149","GHSA-q527-g5jm-fj67"],"status":"published","title":"OS Command Injection in TUBITAK BILGEM's Pardus Software","description":"Improper neutralization of special elements used in an OS command ('OS command injection') vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus Software allows OS Command Injection.\n\nThis issue affects Pardus Software: before 1.0.5.","severity":{"version":"3.1","score":8.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.00953,"percentile":0.61795,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-78"],"published":"2026-09-11T16:04:02Z","modified":"2026-09-11T18:31:24Z","products":[{"vendor":"tubitak bilgem software technologies research institute","product":"pardus software"}],"references":[{"url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1080","tags":["government-resource"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-7863"},{"url":"https://github.com/advisories/GHSA-q527-g5jm-fj67"}],"sources":{"cve":[{"id":"CVE-2026-7863","title":"OS Command Injection in TUBITAK BILGEM's Pardus Software","description":"Improper neutralization of special elements used in an OS command ('OS command injection') vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus Software allows OS Command Injection.\n\nThis issue affects Pardus Software: before 1.0.5.","status":"published","published":"2026-09-11T16:04:02.918Z","modified":"2026-09-11T16:26:00.605Z","cvss":[{"version":"3.1","score":8.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-78"],"updated_at":"2026-11-02T14:20:05.830416Z"}],"euvd":[{"id":"EUVD-2026-76149","description":"Improper neutralization of special elements used in an OS command ('OS command injection') vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus Software allows OS Command Injection.\n\nThis issue affects Pardus Software: before 1.0.5.","status":"published","published":"2026-09-11T16:04:02Z","modified":"2026-09-11T16:26:00Z","cvss":[{"version":"3.1","score":8.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T17:28:22.567961Z"}],"ghsa":[{"id":"GHSA-q527-g5jm-fj67","title":"Improper neutralization of special elements used in an OS command ('OS command injection')...","description":"Improper neutralization of special elements used in an OS command ('OS command injection') vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus Software allows OS Command Injection.\n\nThis issue affects Pardus Software: before 1.0.5.","status":"published","published":"2026-09-11T18:31:24Z","modified":"2026-09-11T18:31:24Z","cvss":[{"version":"3.1","score":8.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-78"],"updated_at":"2026-11-02T15:11:45.091927Z"}],"nvd":[{"id":"CVE-2026-7863","description":"Improper neutralization of special elements used in an OS command ('OS command injection') vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus Software allows OS Command Injection.\n\nThis issue affects Pardus Software: before 1.0.5.","status":"published","published":"2026-09-11T16:17:47.49Z","modified":"2026-09-11T17:35:21.44Z","cvss":[{"version":"3.1","score":8.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-78"],"updated_at":"2026-11-02T14:12:46.271848Z"}]}}