CVE-2026-18806 — Arbitrary Block Device Write via Missing Validation in TÜBİTAK BİLGEM's pardus-image-writer

CVE-2026-18806

Arbitrary Block Device Write via Missing Validation in TÜBİTAK BİLGEM's pardus-image-writer PUBLISHED

Description (CNA)

External control of file name or path vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute pardus-image-writer allows Removing Important Client Functionality. This issue affects pardus-image-writer: before 0.9.0.

Affected (CNA)

Vendor / product	Versions
TÜBİTAK BİLGEM Software Technologies Research Institute / pardus-image-writer	affected 0 before 0.9.0

CWE

CWE-73

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0740

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.