CVE-2026-18806 - Vulnerability Details - OpenCVE

External control of file name or path vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute pardus-image-writer allows Removing Important Client Functionality. This issue affects pardus-image-writer: before 1.0.4.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

No EPSS score available.

Key SSVC decision points have not yet been added.

No data.

No data.

No data.

No data.

References

Link	Providers
https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0740

History

Tue, 04 Aug 2026 13:15:00 +0000

Type	Values Removed	Values Added
Description		External control of file name or path vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute pardus-image-writer allows Removing Important Client Functionality. This issue affects pardus-image-writer: before 1.0.4.
Title		Arbitrary Block Device Write via Missing Validation in TÜBİTAK BİLGEM's pardus-image-writer
Weaknesses		CWE-73
References		https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0740
Metrics		cvssV3_1 `{'score': 7.1, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H'}`

MITRE

Status: PUBLISHED

Assigner: TR-CERT

Published: 2026-08-04T12:38:14.831Z

Updated: 2026-08-04T15:37:47.429Z

Reserved: 2026-08-04T12:12:44.857Z

Link: CVE-2026-18806

Vulnrichment

No data.

NVD

No data.

Redhat

No data.

OpenCVE Enrichment

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-18806", "assignerOrgId": "ca940d4e-fea4-4aa2-9a58-591a58b1ce21", "state": "PUBLISHED", "assignerShortName": "TR-CERT", "dateReserved": "2026-08-04T12:12:44.857Z", "datePublished": "2026-08-04T12:38:14.831Z", "dateUpdated": "2026-08-04T15:37:47.429Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "ca940d4e-fea4-4aa2-9a58-591a58b1ce21", "shortName": "TR-CERT", "dateUpdated": "2026-08-04T12:38:14.831Z"}, "title": "Arbitrary Block Device Write via Missing Validation in T\u00dcB\u0130TAK B\u0130LGEM's pardus-image-writer", "datePublic": "2026-08-04T12:26:00.000Z", "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-73", "description": "CWE-73 External control of file name or path", "type": "CWE"}]}], "impacts": [{"capecId": "CAPEC-207", "descriptions": [{"lang": "en", "value": "CAPEC-207 Removing Important Client Functionality"}]}], "affected": [{"vendor": "T\u00dcB\u0130TAK B\u0130LGEM Software Technologies Research Institute", "product": "pardus-image-writer", "versions": [{"status": "affected", "version": "0", "lessThan": "1.0.4", "versionType": "custom"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "External control of file name or path vulnerability in T\u00dcB\u0130TAK B\u0130LGEM Software Technologies Research Institute pardus-image-writer allows Removing Important Client Functionality.\n\nThis issue affects pardus-image-writer: before 1.0.4.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "External control of file name or path vulnerability in T\u00dcB\u0130TAK B\u0130LGEM Software Technologies Research Institute pardus-image-writer allows Removing Important Client Functionality.<p>This issue affects pardus-image-writer: before 1.0.4.</p>"}]}], "references": [{"url": "https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0740", "tags": ["government-resource"]}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "availabilityImpact": "HIGH", "baseSeverity": "HIGH", "baseScore": 7.1, "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H"}}], "credits": [{"lang": "en", "value": "Emirhan Y\u00dcCEL", "type": "finder"}], "source": {"defect": ["TR-26-0740"], "advisory": "TR-26-0740", "discovery": "UNKNOWN"}, "x_generator": {"engine": "Vulnogram 1.0.4"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-08-04T15:37:37.919419Z", "id": "CVE-2026-18806", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-08-04T15:37:47.429Z"}}]}}