cve-2026-95652
MEDIUM CVSS 6.6 fkie_nvd
Description
Execution with unnecessary privileges vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute pardus-usb-formatter allows Privilege Abuse. This issue affects pardus-usb-formatter: from 0.7.0 before 0.7.2.
Timeline
- Published
- unknown
- Last Modified
- unknown
CVSS Details
- Attack Vector
- LOCAL
- Attack Complexity
- LOW
- Privileges Required
- LOW
Affected Products
No product information available.
Weaknesses (CWE)
CVSS metrics
| Version | Base | Severity | Vector | Exploitability | Impact | Source |
|---|---|---|---|---|---|---|
| 3.1 | 6.6 | MEDIUM | CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H |
1.3 | 5.2 | iletisim@usom.gov.tr |
NVD metadata
- NVD status
- Deferred
- Source identifier
iletisim@usom.gov.tr
Linked Vulnerabilities
No linked vulnerabilities found.
{
"affected": [
{
"affectedData": [
{
"defaultStatus": "unaffected",
"product": "pardus-usb-formatter",
"vendor": "TÜBİTAK BİLGEM Software Technologies Research Institute",
"versions": [
{
"lessThan": "0.7.2",
"status": "affected",
"version": "0.7.0",
"versionType": "semver"
}
]
}
],
"source": "iletisim@usom.gov.tr"
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Execution with unnecessary privileges vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute pardus-usb-formatter allows Privilege Abuse.\n\nThis issue affects pardus-usb-formatter: from 0.7.0 before 0.7.2."
}
],
"id": "CVE-2026-95652",
"lastModified": "2026-11-05T14:48:44.410",
"metrics": {
"cvssMetricV31": [
{
"cvssData": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 6.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H",
"version": "3.1"
},
"exploitabilityScore": 1.3,
"impactScore": 5.2,
"source": "iletisim@usom.gov.tr",
"type": "Primary"
}
]
},
"published": "2026-11-05T13:17:08.437",
"references": [
{
"source": "iletisim@usom.gov.tr",
"url": "https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1466"
}
],
"sourceIdentifier": "iletisim@usom.gov.tr",
"vulnStatus": "Deferred",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-250"
}
],
"source": "iletisim@usom.gov.tr",
"type": "Primary"
}
]
}