Skip to content
CVE PROGRAM SOURCE RECORD7.1 High

CVE-2026-18806

Arbitrary Block Device Write via Missing Validation in TÜBİTAK BİLGEM's pardus-image-writer

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
TR-CERT

Description

External control of file name or path vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute pardus-image-writer allows Removing Important Client Functionality. This issue affects pardus-image-writer: before 0.9.0.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

TÜBİTAK BİLGEM Software Technologies Research Institute pardus-image-writer

Default version status: unaffected

  • 0 to < 0.9.0affected

References