CVE-2026-95518

CVSS 7.0 (high) · published 2026-11-13

Time-of-check time-of-use (TOCTOU) race condition vulnerability in TÜBİTAK BİLGEM Yazılım Teknolojileri Araştırma Enstitüsü Pardus Package Installer allows Leveraging Time-of-Check and Time-of-Use (TOCTOU) Race Conditions. This issue affects Pardus Package Installer: from 0.7.0 before 0.7.1.

Weakness: CWE-367

Source: NVD CVE-2026-95518

References

• https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1539

Check your software

Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.