CVE-2026-94434

CVSS 8.8 (high) · published 2026-11-09

Improper neutralization of special elements used in an OS command ('OS command injection') vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute Pardus Boot Repair allows OS Command Injection. This issue affects Pardus Boot Repair: from 1.0.8 before 1.0.9.

Weakness: CWE-78

Source: NVD CVE-2026-94434

References

• https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1486

Check your software

Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.