Files
vuln-nvd/data/2026/CVE-2026-5140.json
T

2 lines
2.1 KiB
JSON
Raw Blame History

This file contains ambiguous Unicode characters
This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Pardus Update","vendor":"TUBITAK BILGEM Software Technologies Research Institute","versions":[{"lessThan":"0.6.4","status":"affected","version":"0.6.3","versionType":"custom"}]}],"source":"iletisim@usom.gov.tr"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Improper neutralization of CRLF sequences ('CRLF injection') vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus Update allows Authentication Bypass.\n\nThis issue affects Pardus Update: from 0.6.3 before 0.6.4."},{"lang":"es","value":"La vulnerabilidad de neutralización inadecuada de secuencias CRLF (’inyección CRLF’) en el Pardus Update del Instituto de Investigación de Tecnologías de Software TUBITAK BILGEM permite la omisión de autenticación.\n\nEste problema afecta a Pardus Update: desde 0.6.3 hasta antes de 0.6.4."}],"id":"CVE-2026-5140","lastModified":"2026-10-26T20:10:00.160","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":2.8,"impactScore":5.9,"source":"iletisim@usom.gov.tr","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-5140","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2026-04-29T14:04:24.354607Z","version":"2.0.3"}}]},"published":"2026-04-29T14:16:19.777","references":[{"source":"iletisim@usom.gov.tr","url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0131"},{"source":"iletisim@usom.gov.tr","url":"https://www.usom.gov.tr/bildirim/tr-26-0131"}],"sourceIdentifier":"iletisim@usom.gov.tr","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-93"}],"source":"iletisim@usom.gov.tr","type":"Secondary"}]}