CVE-2026-87772: Unauthenticated Polkit Privilege Escalation in TÜBİTAK BİLGEM's Pardus About
Published Nov 12, 2026
·Updated
Incorrect Authorization vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute Pardus About allows Privilege Escalation.
This issue affects Pardus About: before 1.2.5.
Event History
Nov 12, 2026
CVE Published
via MITRE·06:35 AM
Data Sourced
via MITRE·06:35 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·07:16 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Which installations are affected?
Pardus About versions before 1.2.5 are affected. The provided information does not identify specific distributions, deployments, or configuration conditions beyond the affected version range.
2
What access does an attacker need to exploit this issue?
The severity vector indicates local access and low privileges are required, with no user interaction. An attacker must already be able to run code or commands locally as a low-privileged user.
3
What is the potential impact of successful exploitation?
Successful exploitation can result in privilege escalation, with high impact to confidentiality, integrity, and availability according to the supplied severity vector.