CVE-2026-8301
HighCVSS 7.8Summary
An OS Command Injection vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus Boot Repair. The product does not properly neutralize special elements used in OS commands. This issue affects versions before 1.0.8.
Risk Assessment
An attacker could inject and execute arbitrary OS commands, potentially leading to full system compromise. The risk is especially high if the tool runs with root privileges.
Recommendation
Update Pardus Boot Repair to version 1.0.8 or later. Restrict access to the tool to trusted administrators only.
Other vulnerabilities in Pardus Boot Repair
See all- CVE-2026-92080Medium
The pardus-boot-repair tool (TÜBİTAK BİLGEM) has a Path Traversal vulnerability caused by improper limitation of a pathname to a restricted directory. This issue affects versions from 1.0.8 before 1.1.0.
- CVE-2026-105422Medium
The pardus-boot-repair tool (TÜBİTAK BİLGEM) has a Path Traversal vulnerability caused by improper limitation of a pathname to a restricted directory. This issue affects versions from 1.0.9 before 1.1.0.
- CVE-2026-19702High
Pardus Boot Repair (TÜBİTAK BİLGEM product) has an OS command injection vulnerability due to improper neutralization of special elements. Affects versions from 1.0.7 before 1.0.8.
Original NVD description (English source)
Improper neutralization of special elements used in an OS command ('OS command injection') vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus Boot Repair allows OS Command Injection. This issue affects Pardus Boot Repair: before 1.0.8.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS