CVE-2026-5140CWE-93

Authorization Bypass in TUBITAK BILGEM's Pardus Update

High · published April 29, 2026

CVSS v3.1
8.8
EPSS
1%
Percentile
47.1
In the wild
Unconfirmed
What it is

Improper neutralization of CRLF sequences ('CRLF injection') vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus Update allows Authentication Bypass.

This issue affects Pardus Update: from 0.6.3 before 0.6.4.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00583 · 47.1th percentile
Weakness
CWE-93 · Improper Neutralization of CRLF Sequences ('CRLF Injection')
Published
2026-04-29T13:02Z
EPSS history
Timeline
  • 29 APR 13:02Z
    Authorization Bypass in TUBITAK BILGEM's Pardus Update
    cvelistv5