{"id":"CVE-2026-94434","kind":"vulnerability","aliases":["CVE-2026-94434"],"related":[],"title":"Pardus Boot Repair: OS command injection lets attackers run system commands","description":"Improper neutralization of special elements used in an OS command ('OS command injection') vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute Pardus Boot Repair allows OS Command Injection.\n\nThis issue affects Pardus Boot Repair: from 1.0.8 before 1.0.9.","summary":"Pardus Boot Repair, a boot repair tool from TÜBİTAK BİLGEM for the Pardus Linux distribution, does not neutralize special characters in input before passing it to an OS command. An attacker who can supply that input can run commands on the system.","severity":"high","cvss":8.8,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"Pardus Boot Repair","fixed":[],"affected":"","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["boot-repair","linux","other","pardus"],"not_affected_if":["version-1.0.9-or-later"],"how_to_check":"- Check the installed version of Pardus Boot Repair; versions `1.0.8` before `1.0.9` are affected.","fix":"- Pardus Boot Repair: upgrade to `1.0.9`","status":"open","published_at":"2026-11-09T13:17:09+00:00","first_seen_at":"2026-11-09T13:26:51+00:00","triaged_at":"2026-11-09T13:27:25+00:00","updated_at":"2026-11-09T13:27:25+00:00","category":"other","confidence":0.6,"triage":{"at":"2026-11-09T13:27:25Z","model":"claude-haiku-5-5","output":{"fix":"- Pardus Boot Repair: upgrade to `1.0.9`","reach":"unknown","title":"Pardus Boot Repair: OS command injection lets attackers run system commands","impact":"high","summary":"Pardus Boot Repair, a boot repair tool from TÜBİTAK BİLGEM for the Pardus Linux distribution, does not neutralize special characters in input before passing it to an OS command. An attacker who can supply that input can run commands on the system.","audience":"businesses","category":"other","nicknames":[],"who_cares":["pardus","linux","boot-repair"],"confidence":0.6,"fix_status":"available","needs_auth":"unknown","worst_case":"Attacker runs arbitrary OS commands on the affected machine","analyst_note":"Confirm the trigger input and privilege level from the NVD entry or the TÜBİTAK advisory; no linked page was provided.","how_to_check":"- Check the installed version of Pardus Boot Repair; versions `1.0.8` before `1.0.9` are affected.\n- unknown","plain_action":"","product_name":"Pardus Boot Repair","needs_analyst":true,"not_affected_if":["version-1.0.9-or-later"],"who_is_affected":"Systems running Pardus Boot Repair from 1.0.8 up to but not including 1.0.9. The sources do not say what input path reaches the injectable command or who can supply it, so the trigger conditions are unknown.","user_interaction":"unknown","product_ecosystem":"vendor","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000734,"input_tokens":4564,"output_tokens":555,"severity_before":"high"},"analyst_status":null,"analyst_note":null,"search":"'-2026':13A,16A '-94434':14A,17A '1.0.8':104C '1.0.9':106C 'affect':99C 'allow':93C 'attack':8A,57B 'bilgem':36B,85C 'boot':2A,19A,22B,28B,31B,91C,101C 'boot-repair':21B 'charact':46B 'command':5A,11A,55B,65B,78C,80C,95C 'cve':12A,15A 'distribut':41B 'element':73C 'improp':69C 'inject':6A,81C,96C 'input':48B,62B 'institut':89C 'issu':98C 'let':7A 'linux':24B,40B 'neutral':44B,70C 'os':4A,54B,77C,79C,94C 'pardus':1A,18A,26B,27B,39B,90C,100C 'pass':50B 'repair':3A,20A,23B,29B,32B,92C,102C 'research':88C 'run':9A,64B 'softwar':86C 'special':45B,72C 'suppli':60B 'system':10A,68B 'technolog':87C 'tool':33B 'tübitak':35B,84C 'use':74C 'vulner':82C","nicknames":[],"mitigations":[],"who_affected":"Systems running Pardus Boot Repair from 1.0.8 up to but not including 1.0.9. The sources do not say what input path reaches the injectable command or who can supply it, so the trigger conditions are unknown.","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"available","audience":"businesses","plain_action":null,"pkeys":["bootrepair","pardusbootrepair"],"ptokens":["boot","pardus","repair"],"labels":["bootrepair","high","linux","other","pardus","vendor"],"campaign_type":null,"search_a":"'-2026':13A,16A '-94434':14A,17A 'attack':8A 'boot':2A,19A 'command':5A,11A 'cve':12A,15A 'inject':6A 'let':7A 'os':4A 'pardus':1A,18A 'repair':3A,20A 'run':9A 'system':10A","search_b":"'attack':57B 'bilgem':36B 'boot':22B,28B,31B 'boot-repair':21B 'charact':46B 'command':55B,65B 'distribut':41B 'input':48B,62B 'linux':24B,40B 'neutral':44B 'os':54B 'pardus':26B,27B,39B 'pass':50B 'repair':23B,29B,32B 'run':64B 'special':45B 'suppli':60B 'system':68B 'tool':33B 'tübitak':35B","search_c":"'1.0.8':104C '1.0.9':106C 'affect':99C 'allow':93C 'bilgem':85C 'boot':91C,101C 'command':78C,80C,95C 'element':73C 'improp':69C 'inject':81C,96C 'institut':89C 'issu':98C 'neutral':70C 'os':77C,79C,94C 'pardus':90C,100C 'repair':92C,102C 'research':88C 'softwar':86C 'special':72C 'technolog':87C 'tübitak':84C 'use':74C 'vulner':82C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-09T13:17:09+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss_by":"iletisim@usom.gov.tr","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-94434","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-94434","severity":null,"published_at":"2026-11-09T13:17:09+00:00","modified_at":"2026-11-09T13:17:09+00:00","first_seen_at":"2026-11-09T13:26:51+00:00","fetched_at":"2026-11-09T13:26:51+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}