CVE-2026-15599 - Vulnerability Details - OpenCVE

Unverified ownership vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute pardus-domain-joiner allows Privilege Abuse. This issue affects pardus-domain-joiner: before 0.5.5.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact Low

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact partial

Vendors	Products
Tubitak Bilgem Software Technologies Research Institute	Pardus Domain Joiner

No data.

No data.

References

Link	Providers
https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0770

History

Fri, 07 Aug 2026 09:15:00 +0000

Type	Values Removed	Values Added
First Time appeared		Tubitak Bilgem Software Technologies Research Institute Tubitak Bilgem Software Technologies Research Institute pardus Domain Joiner
Vendors & Products		Tubitak Bilgem Software Technologies Research Institute Tubitak Bilgem Software Technologies Research Institute pardus Domain Joiner

Thu, 06 Aug 2026 15:30:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Thu, 06 Aug 2026 13:15:00 +0000

Type	Values Removed	Values Added
Description		Unverified ownership vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute pardus-domain-joiner allows Privilege Abuse. This issue affects pardus-domain-joiner: before 0.5.5.
Title		Arbitrary Process Termination in TÜBİTAK BİLGEM's pardus-domain-joiner
Weaknesses		CWE-283
References		https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0770
Metrics		cvssV3_1 `{'score': 3.3, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L'}`

MITRE

Status: PUBLISHED

Assigner: TR-CERT

Published: 2026-08-06T12:37:22.123Z

Updated: 2026-08-06T14:42:17.468Z

Reserved: 2026-07-13T14:13:50.482Z

Link: CVE-2026-15599

Vulnrichment

Updated: 2026-08-06T14:42:11.375Z

NVD

No data.

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-15599", "assignerOrgId": "ca940d4e-fea4-4aa2-9a58-591a58b1ce21", "state": "PUBLISHED", "assignerShortName": "TR-CERT", "dateReserved": "2026-07-13T14:13:50.482Z", "datePublished": "2026-08-06T12:37:22.123Z", "dateUpdated": "2026-08-06T14:42:17.468Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "ca940d4e-fea4-4aa2-9a58-591a58b1ce21", "shortName": "TR-CERT", "dateUpdated": "2026-08-06T12:37:22.123Z"}, "title": "Arbitrary Process Termination in T\u00dcB\u0130TAK B\u0130LGEM's pardus-domain-joiner", "datePublic": "2026-08-06T12:24:00.000Z", "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-283", "description": "CWE-283 Unverified ownership", "type": "CWE"}]}], "impacts": [{"capecId": "CAPEC-122", "descriptions": [{"lang": "en", "value": "CAPEC-122 Privilege Abuse"}]}], "affected": [{"vendor": "T\u00dcB\u0130TAK B\u0130LGEM Software Technologies Research Institute", "product": "pardus-domain-joiner", "versions": [{"status": "affected", "version": "0", "lessThan": "0.5.5", "versionType": "custom"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "Unverified ownership vulnerability in T\u00dcB\u0130TAK B\u0130LGEM Software Technologies Research Institute pardus-domain-joiner allows Privilege Abuse.\n\nThis issue affects pardus-domain-joiner: before 0.5.5.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "Unverified ownership vulnerability in T\u00dcB\u0130TAK B\u0130LGEM Software Technologies Research Institute pardus-domain-joiner allows Privilege Abuse.<p>This issue affects pardus-domain-joiner: before 0.5.5.</p>"}]}], "references": [{"url": "https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0770", "tags": ["government-resource"]}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "LOW", "baseSeverity": "LOW", "baseScore": 3.3, "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L"}}], "credits": [{"lang": "en", "value": "Namiq Ba\u011f\u0131rzad\u0259", "type": "finder"}], "source": {"defect": ["TR-26-0770"], "advisory": "TR-26-0770", "discovery": "UNKNOWN"}, "x_generator": {"engine": "Vulnogram 1.0.4"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-08-06T14:42:03.910991Z", "id": "CVE-2026-15599", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-08-06T14:42:17.468Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-15599", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-08-06T14:42:03.910991Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-08-06T14:42:11.375Z"}}], "cna": {"title": "Arbitrary Process Termination in T\u00dcB\u0130TAK B\u0130LGEM's pardus-domain-joiner", "source": {"defect": ["TR-26-0770"], "advisory": "TR-26-0770", "discovery": "UNKNOWN"}, "credits": [{"lang": "en", "type": "finder", "value": "Namiq Ba\u011f\u0131rzad\u0259"}], "impacts": [{"capecId": "CAPEC-122", "descriptions": [{"lang": "en", "value": "CAPEC-122 Privilege Abuse"}]}], "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 3.3, "attackVector": "LOCAL", "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "LOW", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "T\u00dcB\u0130TAK B\u0130LGEM Software Technologies Research Institute", "product": "pardus-domain-joiner", "versions": [{"status": "affected", "version": "0", "lessThan": "0.5.5", "versionType": "custom"}], "defaultStatus": "unaffected"}], "datePublic": "2026-08-06T12:24:00.000Z", "references": [{"url": "https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0770", "tags": ["government-resource"]}], "x_generator": {"engine": "Vulnogram 1.0.4"}, "descriptions": [{"lang": "en", "value": "Unverified ownership vulnerability in T\u00dcB\u0130TAK B\u0130LGEM Software Technologies Research Institute pardus-domain-joiner allows Privilege Abuse.\n\nThis issue affects pardus-domain-joiner: before 0.5.5.", "supportingMedia": [{"type": "text/html", "value": "Unverified ownership vulnerability in T\u00dcB\u0130TAK B\u0130LGEM Software Technologies Research Institute pardus-domain-joiner allows Privilege Abuse.<p>This issue affects pardus-domain-joiner: before 0.5.5.</p>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-283", "description": "CWE-283 Unverified ownership"}]}], "providerMetadata": {"orgId": "ca940d4e-fea4-4aa2-9a58-591a58b1ce21", "shortName": "TR-CERT", "dateUpdated": "2026-08-06T12:37:22.123Z"}}}, "cveMetadata": {"cveId": "CVE-2026-15599", "state": "PUBLISHED", "dateUpdated": "2026-08-06T14:42:17.468Z", "dateReserved": "2026-07-13T14:13:50.482Z", "assignerOrgId": "ca940d4e-fea4-4aa2-9a58-591a58b1ce21", "datePublished": "2026-08-06T12:37:22.123Z", "assignerShortName": "TR-CERT"}, "dataVersion": "5.2"}