What is the CVSS score of EUVD-2026-76140?

EUVD-2026-76140 has a CVSS 3.1 base score of 5.5 (Medium). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N. EPSS exploitation probability: 0.1%.

Is there a patch available for EUVD-2026-76140?

Yes, a patch is available for EUVD-2026-76140. Update the affected software to the latest version immediately.

Pardus About EUVD-2026-76140

| CVE-2026-8304 MEDIUM

Missing Authorization (CWE-862)

2026-09-11 TR-CERT

GHSA-6rg9-qq5j-wggv

Pardus About Tubitak Bilgem Software Technologies Research Institute

5.5

CVSS 3.1 · Vendor: TR-CERT

Severity by source

Vendor (TR-CERT) PRIMARY

5.5 MEDIUM

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

vuln.today AI

5.5 MEDIUM

Local low-privileged user bypasses missing authorization to read sensitive data; no integrity or availability impact is established.

3.1 AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

4.0 AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Primary rating from Vendor (TR-CERT).

CVSS VectorVendor: TR-CERT

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

None

Availability

None

Lifecycle Timeline

Patch available

Sep 11, 2026 - 17:17 EUVD

Metadata Corrected

Sep 11, 2026 - 16:40 vuln.today

tag: Authentication Bypass removed

Analysis Generated

Sep 11, 2026 - 16:21 vuln.today

DescriptionCVE.org

Missing Authorization vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus About allows Exploiting Incorrectly Configured Access Control Security Levels.

This issue affects Pardus About: from 1.2.1 before 1.2.5.

AnalysisAI

Local information disclosure in Pardus About (versions 1.2.1 through 1.2.4) allows a low-privileged local user to read sensitive system data that should be restricted to higher-privileged users. The root cause is missing authorization checks (CWE-862) in the desktop information viewer component of the Pardus Linux distribution, developed by TUBITAK BILGEM. …

Unlock full vulnerability intelligence

Risk assessment & exploitation conditions
Attack chain visualization
Remediation with exact patch versions
Threat intelligence from 22 sources
Personal watchlist & email alerts

Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access

technique details hidden

Exploit

technique details hidden

Execution

technique details hidden

Impact

technique details hidden

Access

technique details hidden

Exploit

technique details hidden

Execution

technique details hidden

Impact

technique details hidden

Vulnerability AssessmentAI

Exploitation	Exploitation requires a valid local user account on a Pardus Linux system with Pardus About installed at a version between 1.2.1 and 1.2.4 inclusive. … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment	The CVSS 3.1 score of 5.5 (Medium) reflects a local-only attack surface (AV:L), low privilege requirement (PR:L), and high confidentiality impact (C:H) with no integrity or availability consequences - the overall profile of a local authorization bypass that leaks sensitive read-only information. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario	Full exploit scenario with step-by-step reproduction available after sign-in.
Remediation	Upgrade Pardus About to version 1.2.5 or later, which resolves the missing authorization flaw per the TR-CERT advisory at https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1082. … Detailed patch versions, workarounds, and compensating controls in full report.