PT-2026-35928 · Unknown · Pardus About

Çağrı Eser · CVE-2026-5161 · Published 2026-04-29 · Updated 2026-04-29

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Pardus About versions prior to 1.2.1

Description Improper link resolution before file access, also known as link following, allows a Symlink Attack. This occurs when the software does not properly validate symbolic links, potentially allowing an attacker to access files outside of the intended directory.

Recommendations Update to version 1.2.1 or later.

Fix

Link Following

Weakness Enumeration

CWE-59

Related Identifiers

CVE-2026-5161

Affected Products

Pardus About

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2026-5161 · Security Note
• https://twitter.com/infoflowcloud/status/2049579769298120836 · Twitter Post
• https://usom.gov.tr/bildirim/tr-26-0131 · Note
• https://twitter.com/CVEnew/status/2049578405843406933 · Twitter Post