CVE-2026-5166: Tubitak Bilgem Software Technologies Research Institute Pardus Software Center

Critical severity, CVSS 9.6. EPSS: 0.5% chance of exploitation in the next 30 days.

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus Software Center allows Path Traversal. This issue affects Pardus Software Center: before 0.6.4.

Affected products

• Tubitak Bilgem Software Technologies Research Institute Pardus Software Center: before 0.6.4 (fixed in 0.6.4)

Published 2026-04-29. Last modified 2026-06-17.