CVE-2026-14459

Improper neutralization of argument delimiters in a command ('argument injection') vulnerability in TUBITAK BILGEM Software Technologies Research Institute pardus-software allows Argument Injection. This issue affects pardus-software: from <= 1.0.4 before 1.0.5.

CVSS v3.1

8.8 HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

EPSS

0.21% chance of exploitation in the next 30 days, 11th percentile

Published

2026-07-03

Updated

2026-07-06

Proof-of-concept exploits (1)

• dasokkk/CVE-2026-14459-14460-pardus-software

References

• CVE Record
• NVD entry

Related

• CVE-2026-14460
• CVE-2026-1445
• CVE-2026-1444
• CVE-2026-1448
• CVE-2026-14431
• CVE-2026-14483