{"id":"CVE-2026-92080","kind":"vulnerability","aliases":["CVE-2026-92080"],"related":[],"title":"pardus-boot-repair: path traversal flaw from 1.0.8 before 1.1.0","description":"Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute pardus-boot-repair allows Path Traversal.\n\nThis issue affects pardus-boot-repair: from 1.0.8 before 1.1.0.","summary":"pardus-boot-repair, a boot repair tool from TÜBİTAK BİLGEM for the Pardus Linux distribution, has a path traversal flaw in versions 1.0.8 before 1.1.0. The sources do not describe what an attacker can read or write through it.","severity":"medium","cvss":4.3,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["boot-repair","linux","package","pardus"],"not_affected_if":["version-1.1.0-or-later"],"how_to_check":"- Check the installed version of `pardus-boot-repair` on the affected machine.","fix":"- Move to `1.1.0` or later, per the affected range in the NVD entry.","status":"open","published_at":"2026-11-06T13:17:33+00:00","first_seen_at":"2026-11-06T13:42:19+00:00","triaged_at":"2026-11-06T13:43:16+00:00","updated_at":"2026-11-06T13:43:16+00:00","category":"package","confidence":0.5,"triage":{"at":"2026-11-06T13:43:16Z","model":"claude-haiku-5-5","output":{"fix":"- Move to `1.1.0` or later, per the affected range in the NVD entry.","reach":"local","title":"pardus-boot-repair: path traversal flaw from 1.0.8 before 1.1.0","impact":"medium","summary":"pardus-boot-repair, a boot repair tool from TÜBİTAK BİLGEM for the Pardus Linux distribution, has a path traversal flaw in versions 1.0.8 before 1.1.0. The sources do not describe what an attacker can read or write through it.","audience":"businesses","category":"package","nicknames":[],"who_cares":["pardus","linux","boot-repair"],"confidence":0.5,"fix_status":"available","needs_auth":"unknown","worst_case":"unknown; path traversal may expose or alter files outside the intended directory","analyst_note":"Check the NVD entry and the upstream pardus-boot-repair advisory for the attack vector, privileges and exact traversal impact.","how_to_check":"- Check the installed version of `pardus-boot-repair` on the affected machine.\n- unknown","plain_action":"","needs_analyst":true,"not_affected_if":["version-1.1.0-or-later"],"who_is_affected":"Systems running pardus-boot-repair from 1.0.8 before 1.1.0, typically Pardus Linux installations. The sources do not say what input reaches the vulnerable path handling or what privileges the tool runs with.","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000691,"input_tokens":4252,"output_tokens":531,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-2026':13A,16A '-92080':14A,17A '1.0.8':9A,47B,96C '1.1.0':11A,49B,98C 'affect':90C 'allow':85C 'attack':57B 'bilgem':34B,76C 'boot':3A,19B,26B,29B,83C,93C 'boot-repair':18B 'cve':12A,15A 'describ':54B 'directori':70C 'distribut':39B 'flaw':7A,44B 'improp':62C 'institut':80C 'issu':89C 'limit':63C 'linux':21B,38B 'packag':22B 'pardus':2A,23B,25B,37B,82C,92C 'pardus-boot-repair':1A,24B,81C,91C 'path':5A,42B,71C,86C 'pathnam':66C 'read':59B 'repair':4A,20B,27B,30B,84C,94C 'research':79C 'restrict':69C 'softwar':77C 'sourc':51B 'technolog':78C 'tool':31B 'travers':6A,43B,72C,87C 'tübitak':33B,75C 'version':46B 'vulner':73C 'write':61B","nicknames":[],"mitigations":[],"who_affected":"Systems running pardus-boot-repair from 1.0.8 before 1.1.0, typically Pardus Linux installations. The sources do not say what input reaches the vulnerable path handling or what privileges the tool runs with.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"available","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["bootrepair","linux","medium","package","pardus"],"campaign_type":null,"search_a":"'-2026':13A,16A '-92080':14A,17A '1.0.8':9A '1.1.0':11A 'boot':3A 'cve':12A,15A 'flaw':7A 'pardus':2A 'pardus-boot-repair':1A 'path':5A 'repair':4A 'travers':6A","search_b":"'1.0.8':47B '1.1.0':49B 'attack':57B 'bilgem':34B 'boot':19B,26B,29B 'boot-repair':18B 'describ':54B 'distribut':39B 'flaw':44B 'linux':21B,38B 'packag':22B 'pardus':23B,25B,37B 'pardus-boot-repair':24B 'path':42B 'read':59B 'repair':20B,27B,30B 'sourc':51B 'tool':31B 'travers':43B 'tübitak':33B 'version':46B 'write':61B","search_c":"'1.0.8':96C '1.1.0':98C 'affect':90C 'allow':85C 'bilgem':76C 'boot':83C,93C 'directori':70C 'improp':62C 'institut':80C 'issu':89C 'limit':63C 'pardus':82C,92C 'pardus-boot-repair':81C,91C 'path':71C,86C 'pathnam':66C 'repair':84C,94C 'research':79C 'restrict':69C 'softwar':77C 'technolog':78C 'travers':72C,87C 'tübitak':75C 'vulner':73C","first_public_at":"2026-11-06T13:17:33+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss_by":"iletisim@usom.gov.tr","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-92080","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92080","severity":null,"published_at":"2026-11-06T13:17:33+00:00","modified_at":"2026-11-06T13:17:33+00:00","first_seen_at":"2026-11-06T13:42:19+00:00","fetched_at":"2026-11-06T13:42:19+00:00","note":null}],"documents":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}