CVE-2026-94434

OS Command Injection in Pardus Boot Repair before 1.0.9

CVSS 3.1: 8.8 high
EPSS: 1%p70
Published: Nov 9, 2026 · 5d ago
Modified: Nov 10, 2026

Analyze CVE-2026-94434 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

OS Command Injection in Pardus Boot Repair from 1.0.8 before 1.0.9. An attacker can trigger it to execute arbitrary OS commands. This affects users of the vulnerable versions, potentially leading to full system compromise.

What to do: Apply TÜBİTAK BİLGEM's update for CVE-2026-94434.

Product	Affected
TÜBİTAK BİLGEM Software Technologies Research Institute Pardus Boot Repair	1.0.8 before 1.0.9

Estimated exposure

No basis for an estimate.

Order-of-magnitude estimate by the model from install counts, market share and public scan data it knows; verify before quoting.

Description · NVD

Improper neutralization of special elements used in an OS command ('OS command injection') vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute Pardus Boot Repair allows OS Command Injection. This issue affects Pardus Boot Repair: from 1.0.8 before 1.0.9.

Weakness: CWE-78

Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.3%)

In the news

0 stories

No ingested article mentions this CVE yet.