CVE-2026-12386 - Vulnerability Details - OpenCVE

Improper null termination vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus Pen allows Overflow Buffers. This issue affects Pardus Pen: from <=4.1.5 before 4.2.1.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact Low

Integrity Impact None

Availability Impact Low

User Interaction Required

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact partial

Vendors	Products
Tubitak Bilgem Software Technologies Research Institute	Pardus Pen

No data.

No data.

References

Link	Providers
https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0499

History

Wed, 29 Jul 2026 15:30:00 +0000

Type	Values Removed	Values Added
First Time appeared		Tubitak Bilgem Software Technologies Research Institute Tubitak Bilgem Software Technologies Research Institute pardus Pen
Vendors & Products		Tubitak Bilgem Software Technologies Research Institute Tubitak Bilgem Software Technologies Research Institute pardus Pen

Mon, 06 Jul 2026 15:30:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Sun, 05 Jul 2026 14:45:00 +0000

Type	Values Removed	Values Added
Description		Improper null termination vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus Pen allows Overflow Buffers. This issue affects Pardus Pen: from <=4.1.5 before 4.2.1.
Title		Buffer Overflow in TUBITAK BILGEM's Pardus Pen
Weaknesses		CWE-170
References		https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0499
Metrics		cvssV3_1 `{'score': 3.9, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:L'}`

MITRE

Status: PUBLISHED

Assigner: TR-CERT

Published: 2026-07-05T14:31:47.467Z

Updated: 2026-07-06T13:25:28.190Z

Reserved: 2026-06-16T11:12:47.226Z

Link: CVE-2026-12386

Vulnrichment

Updated: 2026-07-06T13:25:25.329Z

NVD

No data.

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-12386", "assignerOrgId": "ca940d4e-fea4-4aa2-9a58-591a58b1ce21", "state": "PUBLISHED", "assignerShortName": "TR-CERT", "dateReserved": "2026-06-16T11:12:47.226Z", "datePublished": "2026-07-05T14:31:47.467Z", "dateUpdated": "2026-07-06T13:25:28.190Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "ca940d4e-fea4-4aa2-9a58-591a58b1ce21", "shortName": "TR-CERT", "dateUpdated": "2026-07-05T14:31:47.467Z"}, "title": "Buffer Overflow in TUBITAK BILGEM's Pardus Pen", "datePublic": "2026-07-05T14:28:00.000Z", "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-170", "description": "CWE-170 Improper null termination", "type": "CWE"}]}], "impacts": [{"capecId": "CAPEC-100", "descriptions": [{"lang": "en", "value": "CAPEC-100 Overflow Buffers"}]}], "affected": [{"vendor": "TUBITAK BILGEM Software Technologies Research Institute", "product": "Pardus Pen", "versions": [{"status": "affected", "version": "<=4.1.5", "lessThan": "4.2.1", "versionType": "custom"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "Improper null termination vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus Pen allows Overflow Buffers.\n\nThis issue affects Pardus Pen: from <=4.1.5 before 4.2.1.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "Improper null termination vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus Pen allows Overflow Buffers.<p>This issue affects Pardus Pen: from <=4.1.5 before 4.2.1.</p>"}]}], "references": [{"url": "https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0499", "tags": ["government-resource"]}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "availabilityImpact": "LOW", "baseSeverity": "LOW", "baseScore": 3.9, "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:L"}}], "credits": [{"lang": "en", "value": "Muhammed KAYA", "type": "finder"}], "source": {"defect": ["TR-26-0499"], "advisory": "TR-26-0499", "discovery": "UNKNOWN"}, "x_generator": {"engine": "Vulnogram 1.0.2"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-07-06T13:25:21.649209Z", "id": "CVE-2026-12386", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-07-06T13:25:28.190Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-12386", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-07-06T13:25:21.649209Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-07-06T13:25:25.329Z"}}], "cna": {"title": "Buffer Overflow in TUBITAK BILGEM's Pardus Pen", "source": {"defect": ["TR-26-0499"], "advisory": "TR-26-0499", "discovery": "UNKNOWN"}, "credits": [{"lang": "en", "type": "finder", "value": "Muhammed KAYA"}], "impacts": [{"capecId": "CAPEC-100", "descriptions": [{"lang": "en", "value": "CAPEC-100 Overflow Buffers"}]}], "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 3.9, "attackVector": "LOCAL", "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:L", "integrityImpact": "NONE", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "LOW", "privilegesRequired": "LOW", "confidentialityImpact": "LOW"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "TUBITAK BILGEM Software Technologies Research Institute", "product": "Pardus Pen", "versions": [{"status": "affected", "version": "<=4.1.5", "lessThan": "4.2.1", "versionType": "custom"}], "defaultStatus": "unaffected"}], "datePublic": "2026-07-05T14:28:00.000Z", "references": [{"url": "https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0499", "tags": ["government-resource"]}], "x_generator": {"engine": "Vulnogram 1.0.2"}, "descriptions": [{"lang": "en", "value": "Improper null termination vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus Pen allows Overflow Buffers.\n\nThis issue affects Pardus Pen: from <=4.1.5 before 4.2.1.", "supportingMedia": [{"type": "text/html", "value": "Improper null termination vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus Pen allows Overflow Buffers.<p>This issue affects Pardus Pen: from <=4.1.5 before 4.2.1.</p>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-170", "description": "CWE-170 Improper null termination"}]}], "providerMetadata": {"orgId": "ca940d4e-fea4-4aa2-9a58-591a58b1ce21", "shortName": "TR-CERT", "dateUpdated": "2026-07-05T14:31:47.467Z"}}}, "cveMetadata": {"cveId": "CVE-2026-12386", "state": "PUBLISHED", "dateUpdated": "2026-07-06T13:25:28.190Z", "dateReserved": "2026-06-16T11:12:47.226Z", "assignerOrgId": "ca940d4e-fea4-4aa2-9a58-591a58b1ce21", "datePublished": "2026-07-05T14:31:47.467Z", "assignerShortName": "TR-CERT"}, "dataVersion": "5.2"}