CVE-2026-14459

Argument Injection in TUBITAK BILGEM's pardus-software

Improper neutralization of argument delimiters in a command ('argument injection') vulnerability in TUBITAK BILGEM Software Technologies Research Institute pardus-software allows Argument Injection. This issue affects pardus-software: from <= 1.0.4 before 1.0.5.

Affected

TUBITAK BILGEM Software Technologies Research Institute · pardus-software

CVSS v3.1 USOM

8.8 HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

EPSS

0.21% chance of exploitation in the next 30 days, 10th percentile

Published

2026-07-03

Updated

2026-07-06

Proof-of-concept exploits (1)

• dasokkk/CVE-2026-14459-14460-pardus-software0★ · 2026-07-03

References

• CVE Record
• NVD entry

Related

• CVE-2026-14460