Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2026-5140

Authorization Bypass in TUBITAK BILGEM's Pardus Update

Description

Improper neutralization of CRLF sequences ('CRLF injection') vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus Update allows Authentication Bypass. This issue affects Pardus Update: from 0.6.3 before 0.6.4.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

TUBITAK BILGEM Software Technologies Research Institute Pardus Update

Default version status: unaffected

  • 0.6.3 to < 0.6.4affected

References