CVE-2026-18806CWE-73

CVE-2026-18806

High · published August 4, 2026

CVSS v3.1
7.1
EPSS
0%
Percentile
3.7
In the wild
Unconfirmed
What it is

External control of file name or path vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute pardus-image-writer allows Removing Important Client Functionality.

This issue affects pardus-image-writer: before 0.9.0.

The record
Technical detail
CVSS v3.1
7.1 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00148 · 3.7th percentile
Weakness
CWE-73 · External Control of File Name or Path
Published
2026-08-04T17:17Z
References (1)
https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0740 · [email protected]
EPSS history
Timeline
  • 04 AUG 12:38Z
    Arbitrary Block Device Write via Missing Validation in TÜBİTAK BİLGEM's pardus-image-writer
    cvelistv5