CVE-2026-87772

Unauthenticated Polkit Privilege Escalation in TÜBİTAK BİLGEM's Pardus About

  • High 7.8

Description

Incorrect Authorization vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute Pardus About allows Privilege Escalation. This issue affects Pardus About: before 1.2.5.

Key facts

Published
12 Nov 2026
Last changed
12 Nov 2026
Assigned by
TR-CERT
EPSS
0.098% likely to be exploited in the next 30 days, higher than 0.798% of CVEs (scores for 15 Nov 2026)

Severity scores

Each score is shown as its source gave it. They are not averaged or merged.

  • 7.8CVSS 3.1, Highfrom the CNA (TR-CERT)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Historical context and remediation

This reference retains the original CVE publication date. A recent record update does not mean a new attack occurred.

CAPEC-233 Privilege Escalation (CNA impact statement)

No explicit remediation statement is available on this page yet. Consult the original record and vendor references before choosing a fix.

Version statuses below come from the CNA. An “unaffected” version is not necessarily a currently supported release or proof of a patch date. EPSS is a dated risk estimate, not a count of historical attacks.

Read the original CVE record.

Affected products

VendorProductVersions
TÜBİTAK BİLGEM Software Technologies Research InstitutePardus About
  • Default status: unaffected
  • 0 up to but excluding 1.2.5 (affected)

Timeline

  1. 12 Nov 2026 Published

Weakness

References