High · 7.1 CVE-2026-18806 EUVD-2026-52668GHSA-55j4-vcvp-5mxf

Arbitrary Block Device Write via Missing Validation in TÜBİTAK BİLGEM's pardus-image-writer

Published Aug 4, 2026 · Updated Aug 10, 2026 · Assigned by TR-CERT

Vendor: TÜBİTAK BİLGEM Software Technologies Research Institute Product: pardus-image-writer

Description

External control of file name or path vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute pardus-image-writer allows Removing Important Client Functionality.

This issue affects pardus-image-writer: before 0.9.0.

Affected products

Vendor	Product	Affected	Fixed
TÜBİTAK BİLGEM Software Technologies Research Institute	pardus-image-writer	< 0.9.0	0.9.0

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0740 government-resource