Dashboard / CVE-2026-94434

CVE-2026-94434

HIGH 1 PoC
MEDIUM Priority: 0.11 BB Relevance: 78/100
Published: 2026-11-09 Modified: 2026-11-10 First seen: 2026-11-09 Status: active

Attack Surface

Network Low Complexity No Interaction Conf. Impact Integ. Impact

CVSS Vector Breakdown

AV: Network
AC: Low
PR: Low
UI: None
S: Unchanged
C: High
I: High
A: High

Description

Improper neutralization of special elements used in an OS command ('OS command injection') vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute Pardus Boot Repair allows OS Command Injection. This issue affects Pardus Boot Repair: from 1.0.8 before 1.0.9.

Weakness Classification (1)

Affected Software (2)

VendorProductVersion
TÜBİTAK BİLGEM Software Technologies Research Institute Pardus Boot Repair 1.0.8 < 1.0.9
TÜBİTAK BİLGEM Software Technologies Research Institute Pardus Boot Repair 1.0.8 < 1.0.9

References & Advisories (1)

Proof of Concept (1)

—
https://github.com/ozcanpng/CVE-2026-94434
nomi-sec

Bug Bounty Relevance

78 / 100
✓ Network accessible
✓ Low complexity
✓ No user interaction
✓ PoC available (1)

CVSS Score

8.8 / 10.0 v3.1
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS — Exploitation Probability

1.28%
Raw Score 0.012760
Percentile 70.4%
Date 2026-11-13

EPSS Trend

2026-11-13
0.01276
2026-11-12
0.01276
2026-11-10
0.01276

Intelligence Sources

mitre ref →
nvd ref →

External Links