CVE-2026-105422
MediumCVSS 6.6Exploitation Probability (EPSS)
Low risk7th percentile - higher than 7% of all known CVEs
Summary
The pardus-boot-repair tool (TÜBİTAK BİLGEM) has a Path Traversal vulnerability caused by improper limitation of a pathname to a restricted directory. This issue affects versions from 1.0.9 before 1.1.0.
Risk Assessment
An attacker could access files outside the intended directory, potentially leading to disclosure or modification of system data.
Recommendation
Update pardus-boot-repair to version 1.1.0 or later.
Other vulnerabilities in pardus-boot-repair
See all- CVE-2026-8301High
An OS Command Injection vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus Boot Repair. The product does not properly neutralize special elements used in OS commands. This issue affects versions before 1.0.8.
- CVE-2026-92080Medium
The pardus-boot-repair tool (TÜBİTAK BİLGEM) has a Path Traversal vulnerability caused by improper limitation of a pathname to a restricted directory. This issue affects versions from 1.0.8 before 1.1.0.
- CVE-2026-19702High
Pardus Boot Repair (TÜBİTAK BİLGEM product) has an OS command injection vulnerability due to improper neutralization of special elements. Affects versions from 1.0.7 before 1.0.8.
Original NVD description (English source)
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute pardus-boot-repair allows Path Traversal. This issue affects pardus-boot-repair: from 1.0.9 before 1.1.0.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS