CVE-2026-12386: Tubitak Bilgem Software Technologies Research Institute Pardus Pen

Low severity, CVSS 3.9. EPSS: 0.1% chance of exploitation in the next 30 days.

Improper null termination vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus Pen allows Overflow Buffers. This issue affects Pardus Pen: from <=4.1.5 before 4.2.1.

Affected products

• Tubitak Bilgem Software Technologies Research Institute Pardus Pen: up to and including 4.1.5

Published 2026-07-05. Last modified 2026-07-06.