CVE-2026-18806: Tübİtak Bİlgem Software Technologies Research Institute Pardus-Image-Writer

High severity, CVSS 7.1. EPSS: 0.1% chance of exploitation in the next 30 days.

External control of file name or path vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute pardus-image-writer allows Removing Important Client Functionality. This issue affects pardus-image-writer: before 0.9.0.

Affected products

• Tübİtak Bİlgem Software Technologies Research Institute Pardus-Image-Writer: before 0.9.0 (fixed in 0.9.0)

Published 2026-08-04. Last modified 2026-08-26.