CVE-2026-94434: OS Command Injection Leading to Root Code Execution in TÜBİTAK BİLGEM's Pardus Boot Repair
Published Nov 9, 2026
·Updated
Improper neutralization of special elements used in an OS command ('OS command injection') vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute Pardus Boot Repair allows OS Command Injection.
This issue affects Pardus Boot Repair: from 1.0.8 before 1.0.9.
Affected Software
1 affected component
TÜBİTAK BİLGEM Pardus Boot Repair>=1.0.8<1.0.9
Event History
Nov 9, 2026
CVE Published
via MITRE·12:13 PM
Data Sourced
via MITRE·12:13 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Which installations are affected?
Pardus Boot Repair versions from 1.0.8 up to, but not including, 1.0.9 are affected.
2
What level of access does an attacker need?
The CVSS vector indicates an attacker needs low privileges and can exploit the issue over the network without user interaction.
3
What is the potential impact of successful exploitation?
Successful exploitation can lead to OS command injection and root code execution, with high impact to confidentiality, integrity, and availability.