LeakyCreds
NewInstant webhook alerts now available — notified within seconds of any credential detection.Learn more →

CVE-2026-5161 - Vulnerability Analysis

HighCVSS: 8.8

Last Updated: April 29, 2026

TUBITAK BILGEM Pardus About - Path Traversal

Published: April 29, 2026Updated: April 29, 2026Remote Exploitable

Overview

TUBITAK BILGEM Pardus About < 1.2.1 contains a symlink attack vulnerability caused by improper link resolution before file access, letting attackers perform unauthorized file operations, exploit requires local file system access.

Severity & Score

Severity: High
CVSS Score: 8.8

Impact

Attackers can perform unauthorized file operations via symlink attacks, potentially leading to data tampering or information disclosure.

Mitigation

Update to version 1.2.1 or later.

Details

CVE ID
CVE-2026-5161
Severity
High
CVSS Score
8.8
Type
path_traversal
Status
rejected

CWE

  • CWE-59

CVSS Metrics

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H