{"schema_version":1,"title":"TUBITAK BILGEM Software Technologies Research Institute vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 9 vulnerabilities in TUBITAK BILGEM Software Technologies Research Institute: 0 in the last 7 days and 5 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2026-9085, was published on 5 July 2026.","url":"https://junglewise.ai/threats/vendors/tubitak-bilgem-software-technologies-research-institute","json_url":"https://junglewise.ai/threats/vendors/tubitak-bilgem-software-technologies-research-institute.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/vendors/tubitak-bilgem-software-technologies-research-institute","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"vendor","counts":{"high":7,"all_time":9,"critical":0,"exploited":0,"last_7_days":0,"last_30_days":0,"last_90_days":5,"last_365_days":9},"latest":[{"cve":"CVE-2026-9085","cvss":8.8,"slug":"cve-2026-9085-tubitak-bilgem-pardus-parental-control-dns-spoofing-via-improper","title":"TUBITAK BILGEM Pardus-Parental-Control DNS spoofing via improper access control","severity":"high","exploited":false,"published_at":"2026-07-05T15:16:57.8+00:00","url":"https://junglewise.ai/threats/cve-2026-9085-tubitak-bilgem-pardus-parental-control-dns-spoofing-via-improper"},{"cve":"CVE-2026-12386","cvss":3.9,"slug":"cve-2026-12386-tubitak-bilgem-pardus-pen-buffer-overflow-via-improper-null","title":"TUBITAK BILGEM Pardus Pen buffer overflow via improper null termination","severity":"low","exploited":false,"published_at":"2026-07-05T15:16:56.373+00:00","url":"https://junglewise.ai/threats/cve-2026-12386-tubitak-bilgem-pardus-pen-buffer-overflow-via-improper-null"},{"cve":"CVE-2026-12250","cvss":7.9,"slug":"cve-2026-12250-tubitak-bilgem-pardus-domain-joiner-sensitive-information","title":"TUBITAK BILGEM Pardus Domain Joiner sensitive information disclosure","severity":"high","exploited":false,"published_at":"2026-07-05T15:16:56.247+00:00","url":"https://junglewise.ai/threats/cve-2026-12250-tubitak-bilgem-pardus-domain-joiner-sensitive-information"},{"cve":"CVE-2026-14460","cvss":8.8,"slug":"cve-2026-14460-tubitak-bilgem-pardus-software-argument-injection-privilege","title":"TUBITAK BILGEM pardus-software argument injection privilege escalation","severity":"high","exploited":false,"published_at":"2026-07-03T15:16:32.367+00:00","url":"https://junglewise.ai/threats/cve-2026-14460-tubitak-bilgem-pardus-software-argument-injection-privilege"},{"cve":"CVE-2026-14459","cvss":8.8,"slug":"cve-2026-14459-tubitak-bilgem-pardus-software-argument-injection","title":"TUBITAK BILGEM pardus-software argument injection","severity":"high","exploited":false,"published_at":"2026-07-03T15:16:32.253+00:00","url":"https://junglewise.ai/threats/cve-2026-14459-tubitak-bilgem-pardus-software-argument-injection"},{"cve":"CVE-2026-6849","cvss":8.8,"epss":0.0012,"slug":"cve-2026-6849-pardus-os-my-computer-os-command-injection","title":"Pardus OS My Computer OS command injection","severity":"high","exploited":false,"published_at":"2026-04-29T16:16:28.413+00:00","url":"https://junglewise.ai/threats/cve-2026-6849-pardus-os-my-computer-os-command-injection"},{"cve":"CVE-2026-5161","cvss":8.8,"epss":0.0005,"slug":"cve-2026-5161-tubitak-bilgem-pardus-about-symlink-attack-vulnerability","title":"TUBITAK BILGEM Pardus About symlink attack vulnerability","severity":"high","exploited":false,"published_at":"2026-04-29T15:16:08.01+00:00","url":"https://junglewise.ai/threats/cve-2026-5161-tubitak-bilgem-pardus-about-symlink-attack-vulnerability"},{"cve":"CVE-2026-2339","cvss":7.5,"epss":0.0021,"slug":"cve-2026-2339-tubitak-bilgem-liderahenk-missing-authentication-for-critical","title":"TUBITAK BILGEM Liderahenk missing authentication for critical function","severity":"high","exploited":false,"published_at":"2026-03-10T18:18:48.393+00:00","url":"https://junglewise.ai/threats/cve-2026-2339-tubitak-bilgem-liderahenk-missing-authentication-for-critical"},{"cve":"CVE-2025-7706","cvss":6.1,"epss":0.0006,"slug":"cve-2025-7706-tubitak-bilgem-liderahenk-missing-authentication-in-critical","title":"TUBITAK BILGEM Liderahenk missing authentication in critical function","severity":"medium","exploited":false,"published_at":"2026-02-17T14:16:00.483+00:00","url":"https://junglewise.ai/threats/cve-2025-7706-tubitak-bilgem-liderahenk-missing-authentication-in-critical"}],"vendor":{"hub":true,"name":"TUBITAK BILGEM Software Technologies Research Institute","slug":"tubitak-bilgem-software-technologies-research-institute","homepage":"https://bilgem.tubitak.gov.tr/en/","description":"A Turkish national research institute focused on software technologies and digital security.","url":"https://junglewise.ai/threats/vendors/tubitak-bilgem-software-technologies-research-institute"},"weekly":[{"week":"2026-07-06","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-13","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-20","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-27","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-03","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-10","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-28","critical":0,"exploited":0,"vulnerabilities":0}],"most_severe":[{"cve":"CVE-2026-6849","cvss":8.8,"epss":0.0012,"slug":"cve-2026-6849-pardus-os-my-computer-os-command-injection","title":"Pardus OS My Computer OS command injection","severity":"high","exploited":false,"published_at":"2026-04-29T16:16:28.413+00:00","url":"https://junglewise.ai/threats/cve-2026-6849-pardus-os-my-computer-os-command-injection"},{"cve":"CVE-2026-5161","cvss":8.8,"epss":0.0005,"slug":"cve-2026-5161-tubitak-bilgem-pardus-about-symlink-attack-vulnerability","title":"TUBITAK BILGEM Pardus About symlink attack vulnerability","severity":"high","exploited":false,"published_at":"2026-04-29T15:16:08.01+00:00","url":"https://junglewise.ai/threats/cve-2026-5161-tubitak-bilgem-pardus-about-symlink-attack-vulnerability"},{"cve":"CVE-2026-9085","cvss":8.8,"slug":"cve-2026-9085-tubitak-bilgem-pardus-parental-control-dns-spoofing-via-improper","title":"TUBITAK BILGEM Pardus-Parental-Control DNS spoofing via improper access control","severity":"high","exploited":false,"published_at":"2026-07-05T15:16:57.8+00:00","url":"https://junglewise.ai/threats/cve-2026-9085-tubitak-bilgem-pardus-parental-control-dns-spoofing-via-improper"},{"cve":"CVE-2026-14460","cvss":8.8,"slug":"cve-2026-14460-tubitak-bilgem-pardus-software-argument-injection-privilege","title":"TUBITAK BILGEM pardus-software argument injection privilege escalation","severity":"high","exploited":false,"published_at":"2026-07-03T15:16:32.367+00:00","url":"https://junglewise.ai/threats/cve-2026-14460-tubitak-bilgem-pardus-software-argument-injection-privilege"},{"cve":"CVE-2026-14459","cvss":8.8,"slug":"cve-2026-14459-tubitak-bilgem-pardus-software-argument-injection","title":"TUBITAK BILGEM pardus-software argument injection","severity":"high","exploited":false,"published_at":"2026-07-03T15:16:32.253+00:00","url":"https://junglewise.ai/threats/cve-2026-14459-tubitak-bilgem-pardus-software-argument-injection"},{"cve":"CVE-2026-12250","cvss":7.9,"slug":"cve-2026-12250-tubitak-bilgem-pardus-domain-joiner-sensitive-information","title":"TUBITAK BILGEM Pardus Domain Joiner sensitive information disclosure","severity":"high","exploited":false,"published_at":"2026-07-05T15:16:56.247+00:00","url":"https://junglewise.ai/threats/cve-2026-12250-tubitak-bilgem-pardus-domain-joiner-sensitive-information"},{"cve":"CVE-2026-2339","cvss":7.5,"epss":0.0021,"slug":"cve-2026-2339-tubitak-bilgem-liderahenk-missing-authentication-for-critical","title":"TUBITAK BILGEM Liderahenk missing authentication for critical function","severity":"high","exploited":false,"published_at":"2026-03-10T18:18:48.393+00:00","url":"https://junglewise.ai/threats/cve-2026-2339-tubitak-bilgem-liderahenk-missing-authentication-for-critical"},{"cve":"CVE-2025-7706","cvss":6.1,"epss":0.0006,"slug":"cve-2025-7706-tubitak-bilgem-liderahenk-missing-authentication-in-critical","title":"TUBITAK BILGEM Liderahenk missing authentication in critical function","severity":"medium","exploited":false,"published_at":"2026-02-17T14:16:00.483+00:00","url":"https://junglewise.ai/threats/cve-2025-7706-tubitak-bilgem-liderahenk-missing-authentication-in-critical"},{"cve":"CVE-2026-12386","cvss":3.9,"slug":"cve-2026-12386-tubitak-bilgem-pardus-pen-buffer-overflow-via-improper-null","title":"TUBITAK BILGEM Pardus Pen buffer overflow via improper null termination","severity":"low","exploited":false,"published_at":"2026-07-05T15:16:56.373+00:00","url":"https://junglewise.ai/threats/cve-2026-12386-tubitak-bilgem-pardus-pen-buffer-overflow-via-improper-null"}],"generated_at":"2026-09-28T03:07:00.154823+00:00","technologies":[]}