CVE-2026-5166 — AI Deep Analysis Summary

🚨 **Essence**: A **Path Traversal** flaw in Pardus Software Center. 📉 **Consequences**: Attackers can access files outside the intended directory, leading to potential **Data Theft** or **System Compromise**.…

🛡️ **Root Cause**: **CWE-22** (Improper Limitation of a Pathname to a Restricted Directory).…

🏢 **Vendor**: TÜBİTAK BİLGEM (Turkey). 📦 **Product**: Pardus Software Center. ⚠️ **Affected Versions**: **1.0.3 and earlier**. If you are running v1.0.2 or below, you are at risk!

💻 **Privileges**: High impact. CVSS Score indicates **High** Confidentiality, Integrity, and Availability impact.…

🔓 **Threshold**: **Low**. ⚙️ **Auth**: No privileges required (PR:N). 🖱️ **UI**: Requires User Interaction (UI:R). 🌐 **Network**: Network exploitable (AV:N).…

🚫 **Public Exp**: **No**. The `pocs` field is empty. 📜 **Reference**: Only a third-party advisory from USOM (Turkish National Cyber Security Incident Response Team) exists. No public PoC code is available yet.

🔍 **Self-Check**: Check your installed version. 📋 **Action**: Open Pardus Software Center → Settings/About. If version < **1.0.3**, you are vulnerable.…

✅ **Fix**: Yes. Upgrade to **version 1.0.4 or later**. 📥 **Source**: Refer to the USOM advisory link for official patch details. The vendor has acknowledged the issue and released a fix.

🚧 **Workaround**: If you cannot patch immediately: 1. **Disable** the Software Center service if not needed. 2. **Restrict** network access to the application. 3.…

🔥 **Urgency**: **High**. 📅 **Published**: April 2026. 📈 **Risk**: CVSS Vector shows **Critical** potential impact (C:H, I:H, A:H).…