CVE-2026-11765: Argument Injection in TUBITAK BILGEM's Pardus Pen
Published Sep 11, 2026
·Updated
Improper neutralization of argument delimiters in a command ('argument injection') vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus Pen allows Argument Injection.
This issue affects Pardus Pen: before 4.2.1.
Affected Software
1 affected component
TUBITAK BILGEM Pardus Pen<4.2.1
Event History
Sep 11, 2026
CVE Published
via MITRE·01:20 PM
Data Sourced
via MITRE·01:20 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Which installations are affected?
Pardus Pen versions before 4.2.1 are affected. The provided data does not identify any affected configuration conditions beyond the version range.
2
What level of access does an attacker need?
An attacker needs local access and low privileges. No user interaction is required.
3
What is the security impact of successful exploitation?
Successful exploitation can affect integrity, with no reported confidentiality or availability impact. The severity vector indicates the impact is limited to the vulnerable security authority.