ByteOS Network

CVE Vulnerability Details :

CVE-2026-14459

PUBLISHED

More Info Official Page

Assigner-TR-CERT

Assigner Org ID-ca940d4e-fea4-4aa2-9a58-591a58b1ce21

Published At-03 Jul, 2026 | 14:09

Updated At-03 Jul, 2026 | 14:09

▼CVE Numbering Authority (CNA)

Argument Injection in TUBITAK BILGEM's pardus-software

Improper neutralization of argument delimiters in a command ('argument injection') vulnerability in TUBITAK BILGEM Software Technologies Research Institute pardus-software allows Argument Injection. This issue affects pardus-software: from <= 1.0.4 before 1.0.5.

Affected Products

Vendor

TUBITAK BILGEM Software Technologies Research Institute

Product

pardus-software

Default Status

unaffected

Versions

Affected

From <= 1.0.4 before 1.0.5 (custom)

Problem Types

Type	CWE ID	Description
CWE	CWE-88	CWE-88 Improper neutralization of argument delimiters in a command ('argument injection')

Type: CWE

CWE ID: CWE-88

Description: CWE-88 Improper neutralization of argument delimiters in a command ('argument injection')

Metrics

Version	Base score	Base severity	Vector
3.1	8.8	HIGH	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Version: 3.1

Base score: 8.8

Base severity: HIGH

Vector:

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Impacts

CAPEC ID	Description
CAPEC-6	CAPEC-6 Argument Injection

CAPEC ID: CAPEC-6

Description: CAPEC-6 Argument Injection

Credits

finder

Kerem Kaan DASMAZ

References

Hyperlink	Resource
https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0497	government-resource

Hyperlink: https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0497

Resource:

government-resource

Affected Products

Affected

Problem Types

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References