{"schema_version":1,"title":"TÜBİTAK BİLGEM vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 12 vulnerabilities in TÜBİTAK BİLGEM: 7 in the last 7 days and 11 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2026-16478, was published on 10 November 2026. 4 vulnerabilities in the last four weeks, up from none in the four before. 1 technology has a page of its own.","url":"https://junglewise.ai/threats/vendors/t-bi-tak-bi-lgem","json_url":"https://junglewise.ai/threats/vendors/t-bi-tak-bi-lgem.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/vendors/t-bi-tak-bi-lgem","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"vendor","thin":false,"counts":{"high":7,"all_time":12,"critical":0,"exploited":0,"last_7_days":7,"last_30_days":9,"last_90_days":11,"last_365_days":12},"latest":[{"cve":"CVE-2026-16478","cvss":7,"slug":"cve-2026-16478-permissive-list-of-allowed-inputs-vulnerability-in-tubi-tak-bi","title":"TÜBİTAK BİLGEM pardus-nvidia-installer privilege escalation","severity":"high","exploited":false,"published_at":"2026-11-10T13:18:29.03+00:00","url":"https://junglewise.ai/threats/cve-2026-16478-permissive-list-of-allowed-inputs-vulnerability-in-tubi-tak-bi"},{"cve":"CVE-2026-121191","cvss":6.5,"slug":"cve-2026-121191-missing-authorization-vulnerability-in-tubi-tak-bi-lgem-software","title":"TÜBİTAK BİLGEM eta-remote authorization bypass in ACL enforcement","severity":"medium","exploited":false,"published_at":"2026-11-10T12:17:17.24+00:00","url":"https://junglewise.ai/threats/cve-2026-121191-missing-authorization-vulnerability-in-tubi-tak-bi-lgem-software"},{"cve":"CVE-2026-94434","cvss":8.8,"slug":"cve-2026-94434-improper-neutralization-of-special-elements-used-in-an-os-command","title":"TÜBİTAK BİLGEM Pardus Boot Repair OS command injection","severity":"high","exploited":false,"published_at":"2026-11-09T13:17:09.273+00:00","url":"https://junglewise.ai/threats/cve-2026-94434-improper-neutralization-of-special-elements-used-in-an-os-command"},{"cve":"CVE-2026-94249","cvss":8.1,"slug":"cve-2026-94249-missing-authorization-vulnerability-in-tubi-tak-bi-lgem-software","title":"Liderahenk missing authorization vulnerability","severity":"high","exploited":false,"published_at":"2026-11-09T09:16:59.927+00:00","url":"https://junglewise.ai/threats/cve-2026-94249-missing-authorization-vulnerability-in-tubi-tak-bi-lgem-software"},{"cve":"CVE-2026-92606","cvss":6,"slug":"cve-2026-92606-time-of-check-time-of-use-toctou-race-condition-vulnerability-in","title":"Pardus MyComputer TOCTOU race condition","severity":"medium","exploited":false,"published_at":"2026-11-09T09:16:59.753+00:00","url":"https://junglewise.ai/threats/cve-2026-92606-time-of-check-time-of-use-toctou-race-condition-vulnerability-in"},{"cve":"CVE-2026-92080","cvss":4.3,"slug":"cve-2026-92080-improper-limitation-of-a-pathname-to-a-restricted-directory-path","title":"TÜBİTAK BİLGEM pardus-boot-repair path traversal","severity":"medium","exploited":false,"published_at":"2026-11-06T13:17:33.34+00:00","url":"https://junglewise.ai/threats/cve-2026-92080-improper-limitation-of-a-pathname-to-a-restricted-directory-path"},{"cve":"CVE-2026-105422","cvss":6.6,"slug":"cve-2026-105422-improper-limitation-of-a-pathname-to-a-restricted-directory-path","title":"TÜBİTAK BİLGEM pardus-boot-repair path traversal","severity":"medium","exploited":false,"published_at":"2026-11-06T13:17:21.76+00:00","url":"https://junglewise.ai/threats/cve-2026-105422-improper-limitation-of-a-pathname-to-a-restricted-directory-path"},{"cve":"CVE-2026-95652","cvss":6.6,"slug":"cve-2026-95652-execution-with-unnecessary-privileges-vulnerability-in-tubi-tak","title":"TÜBİTAK BİLGEM pardus-usb-formatter privilege abuse in execution","severity":"medium","exploited":false,"published_at":"2026-11-05T13:17:08.437+00:00","url":"https://junglewise.ai/threats/cve-2026-95652-execution-with-unnecessary-privileges-vulnerability-in-tubi-tak"},{"cve":"CVE-2026-92886","cvss":7.8,"slug":"cve-2026-92886-missing-authorization-vulnerability-in-tubi-tak-bi-lgem-software","title":"TÜBİTAK BİLGEM eta-register missing authorization privilege escalation","severity":"high","exploited":false,"published_at":"2026-11-02T13:17:41.25+00:00","url":"https://junglewise.ai/threats/cve-2026-92886-missing-authorization-vulnerability-in-tubi-tak-bi-lgem-software"},{"cve":"CVE-2026-79617","cvss":7.1,"epss":0.0014,"slug":"cve-2026-79617-pardus-lightdm-greeter-permission-assignment-vulnerability","title":"Pardus LightDM Greeter permission assignment vulnerability","severity":"high","exploited":false,"published_at":"2026-09-09T15:17:09.543+00:00","url":"https://junglewise.ai/threats/cve-2026-79617-pardus-lightdm-greeter-permission-assignment-vulnerability"},{"cve":"CVE-2026-19702","cvss":7.8,"epss":0.0049,"slug":"cve-2026-19702-tubi-tak-bi-lgem-pardus-boot-repair-os-command-injection","title":"TÜBİTAK BİLGEM Pardus Boot Repair OS command injection","severity":"high","exploited":false,"published_at":"2026-08-31T14:17:14.047+00:00","url":"https://junglewise.ai/threats/cve-2026-19702-tubi-tak-bi-lgem-pardus-boot-repair-os-command-injection"},{"cve":"CVE-2026-5140","cvss":8.8,"epss":0.0005,"slug":"cve-2026-5140-tubitak-bilgem-pardus-update-crlf-injection-authentication-bypass","title":"TUBITAK BILGEM Pardus Update CRLF injection authentication bypass","severity":"high","exploited":false,"published_at":"2026-04-29T14:16:19.777+00:00","url":"https://junglewise.ai/threats/cve-2026-5140-tubitak-bilgem-pardus-update-crlf-injection-authentication-bypass"}],"vendor":{"hub":true,"name":"TÜBİTAK BİLGEM","slug":"t-bi-tak-bi-lgem","homepage":"https://bilgem.tubitak.gov.tr/en/","description":"The Informatics and Information Security Research Center of the Scientific and Technological Research Council of Turkey.","url":"https://junglewise.ai/threats/vendors/t-bi-tak-bi-lgem"},"weekly":[{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":1},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":1},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-28","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-05","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-12","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-19","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-26","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-02","critical":0,"exploited":0,"vulnerabilities":4},{"week":"2026-11-09","critical":0,"exploited":0,"vulnerabilities":5}],"most_severe":[{"cve":"CVE-2026-5140","cvss":8.8,"epss":0.0005,"slug":"cve-2026-5140-tubitak-bilgem-pardus-update-crlf-injection-authentication-bypass","title":"TUBITAK BILGEM Pardus Update CRLF injection authentication bypass","severity":"high","exploited":false,"published_at":"2026-04-29T14:16:19.777+00:00","url":"https://junglewise.ai/threats/cve-2026-5140-tubitak-bilgem-pardus-update-crlf-injection-authentication-bypass"},{"cve":"CVE-2026-94434","cvss":8.8,"slug":"cve-2026-94434-improper-neutralization-of-special-elements-used-in-an-os-command","title":"TÜBİTAK BİLGEM Pardus Boot Repair OS command injection","severity":"high","exploited":false,"published_at":"2026-11-09T13:17:09.273+00:00","url":"https://junglewise.ai/threats/cve-2026-94434-improper-neutralization-of-special-elements-used-in-an-os-command"},{"cve":"CVE-2026-94249","cvss":8.1,"slug":"cve-2026-94249-missing-authorization-vulnerability-in-tubi-tak-bi-lgem-software","title":"Liderahenk missing authorization vulnerability","severity":"high","exploited":false,"published_at":"2026-11-09T09:16:59.927+00:00","url":"https://junglewise.ai/threats/cve-2026-94249-missing-authorization-vulnerability-in-tubi-tak-bi-lgem-software"},{"cve":"CVE-2026-19702","cvss":7.8,"epss":0.0049,"slug":"cve-2026-19702-tubi-tak-bi-lgem-pardus-boot-repair-os-command-injection","title":"TÜBİTAK BİLGEM Pardus Boot Repair OS command injection","severity":"high","exploited":false,"published_at":"2026-08-31T14:17:14.047+00:00","url":"https://junglewise.ai/threats/cve-2026-19702-tubi-tak-bi-lgem-pardus-boot-repair-os-command-injection"},{"cve":"CVE-2026-92886","cvss":7.8,"slug":"cve-2026-92886-missing-authorization-vulnerability-in-tubi-tak-bi-lgem-software","title":"TÜBİTAK BİLGEM eta-register missing authorization privilege escalation","severity":"high","exploited":false,"published_at":"2026-11-02T13:17:41.25+00:00","url":"https://junglewise.ai/threats/cve-2026-92886-missing-authorization-vulnerability-in-tubi-tak-bi-lgem-software"},{"cve":"CVE-2026-79617","cvss":7.1,"epss":0.0014,"slug":"cve-2026-79617-pardus-lightdm-greeter-permission-assignment-vulnerability","title":"Pardus LightDM Greeter permission assignment vulnerability","severity":"high","exploited":false,"published_at":"2026-09-09T15:17:09.543+00:00","url":"https://junglewise.ai/threats/cve-2026-79617-pardus-lightdm-greeter-permission-assignment-vulnerability"},{"cve":"CVE-2026-16478","cvss":7,"slug":"cve-2026-16478-permissive-list-of-allowed-inputs-vulnerability-in-tubi-tak-bi","title":"TÜBİTAK BİLGEM pardus-nvidia-installer privilege escalation","severity":"high","exploited":false,"published_at":"2026-11-10T13:18:29.03+00:00","url":"https://junglewise.ai/threats/cve-2026-16478-permissive-list-of-allowed-inputs-vulnerability-in-tubi-tak-bi"},{"cve":"CVE-2026-105422","cvss":6.6,"slug":"cve-2026-105422-improper-limitation-of-a-pathname-to-a-restricted-directory-path","title":"TÜBİTAK BİLGEM pardus-boot-repair path traversal","severity":"medium","exploited":false,"published_at":"2026-11-06T13:17:21.76+00:00","url":"https://junglewise.ai/threats/cve-2026-105422-improper-limitation-of-a-pathname-to-a-restricted-directory-path"},{"cve":"CVE-2026-95652","cvss":6.6,"slug":"cve-2026-95652-execution-with-unnecessary-privileges-vulnerability-in-tubi-tak","title":"TÜBİTAK BİLGEM pardus-usb-formatter privilege abuse in execution","severity":"medium","exploited":false,"published_at":"2026-11-05T13:17:08.437+00:00","url":"https://junglewise.ai/threats/cve-2026-95652-execution-with-unnecessary-privileges-vulnerability-in-tubi-tak"},{"cve":"CVE-2026-121191","cvss":6.5,"slug":"cve-2026-121191-missing-authorization-vulnerability-in-tubi-tak-bi-lgem-software","title":"TÜBİTAK BİLGEM eta-remote authorization bypass in ACL enforcement","severity":"medium","exploited":false,"published_at":"2026-11-10T12:17:17.24+00:00","url":"https://junglewise.ai/threats/cve-2026-121191-missing-authorization-vulnerability-in-tubi-tak-bi-lgem-software"}],"generated_at":"2026-11-13T03:07:00.155039+00:00","technologies":[{"name":"TÜBİTAK BİLGEM Pardus Boot Repair","slug":"pardus-boot-repair","vulnerabilities":4,"url":"https://junglewise.ai/threats/technologies/pardus-boot-repair"}]}