CVE-2026-11765: Tubitak Bilgem Software Technologies Research Institute Pardus Pen

Low severity, CVSS 3.3. EPSS: 0.1% chance of exploitation in the next 30 days.

Improper neutralization of argument delimiters in a command ('argument injection') vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus Pen allows Argument Injection. This issue affects Pardus Pen: before 4.2.1.

Affected products

• Tubitak Bilgem Software Technologies Research Institute Pardus Pen: before 4.2.1 (fixed in 4.2.1)

Published 2026-09-11. Last modified 2026-09-11.