CVE-2026-95652: Improper Device Validation Allows Privileged Disk Formatting in TÜBİTAK BİLGEM's pardus-usb-formatter
Published Nov 5, 2026
·Updated
Execution with unnecessary privileges vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute pardus-usb-formatter allows Privilege Abuse.
This issue affects pardus-usb-formatter: from 0.7.0 before 0.7.2.
Event History
Nov 5, 2026
CVE Published
via MITRE·12:15 PM
Data Sourced
via MITRE·12:15 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·01:17 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Which installations are affected?
pardus-usb-formatter versions from 0.7.0 up to, but not including, 0.7.2 are affected.
2
What level of access does an attacker need?
The vulnerability requires local access, low privileges, and user interaction. It can be abused to perform disk-formatting actions with unnecessary privileges.
3
What is the remediation?
Update pardus-usb-formatter to version 0.7.2 or later.