Files
vuln-nvd/data/2026/CVE-2026-5166.json
T

2 lines
2.1 KiB
JSON
Raw Blame History

This file contains ambiguous Unicode characters
This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Pardus Software Center","vendor":"TUBITAK BILGEM Software Technologies Research Institute","versions":[{"lessThan":"0.6.4","status":"affected","version":"0","versionType":"custom"}]}],"source":"iletisim@usom.gov.tr"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus Software Center allows Path Traversal.\n\nThis issue affects Pardus Software Center: before 0.6.4."},{"lang":"es","value":"Vulnerabilidad de Limitación Inadecuada de un Nombre de Ruta a un Directorio Restringido (’Salto de Ruta’) en el Centro de Software Pardus del Instituto de Investigación de Tecnologías de Software TUBITAK BILGEM permite el Salto de Ruta.\n\nEste problema afecta al Centro de Software Pardus: antes de la versión 0.6.4."}],"id":"CVE-2026-5166","lastModified":"2026-10-26T20:10:00.160","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":9.6,"baseSeverity":"CRITICAL","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"CHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":2.8,"impactScore":6.0,"source":"iletisim@usom.gov.tr","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-5166","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2026-04-29T15:35:55.611035Z","version":"2.0.3"}}]},"published":"2026-04-29T16:16:26.673","references":[{"source":"iletisim@usom.gov.tr","url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0131"},{"source":"iletisim@usom.gov.tr","url":"https://www.usom.gov.tr/bildirim/tr-26-0131"}],"sourceIdentifier":"iletisim@usom.gov.tr","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-22"}],"source":"iletisim@usom.gov.tr","type":"Secondary"}]}