CVE-2026-5161
HIGHCVSS 8.8/10EPSS 0.33%
Last modified
CVE-2026-5161 is a high-severity vulnerability rated 8.8/10 on the CVSS scale. Improper link resolution before file access ('link following') vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus About allows Symlink Attack. This issue affects Pardus About: before 1.2.2.. EPSS estimates a 0.33% chance of exploitation in the next 30 days.
Description
Improper link resolution before file access ('link following') vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus About allows Symlink Attack. This issue affects Pardus About: before 1.2.2.
Metrics
Weakness Enumeration
References
Timeline
- Published
- Last Modified
- Status
- Deferred
Frequently Asked Questions
What is CVE-2026-5161?
Improper link resolution before file access ('link following') vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus About allows Symlink Attack.
This issue affects Pardus About: before 1.2.2.
How severe is CVE-2026-5161?
CVE-2026-5161 has a CVSS score of 8.8/10 (HIGH severity). The EPSS model estimates a 0.33% probability of exploitation in the next 30 days.
How do I fix CVE-2026-5161?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-51601Tenda CP3 V3.0 firmware V31.1.9.91 contains a stack-based bu…7.5
- CVE-2026-51602A stack-based buffer overflow vulnerability in the RTSP serv…7.5
- CVE-2026-51603A stack-based buffer overflow vulnerability in the RTSP serv…7.5
- CVE-2026-51604A stack-based buffer overflow vulnerability in the RTSP serv…7.5
- CVE-2026-51605A stack-based buffer overflow vulnerability in the RTSP serv…7.5
- CVE-2026-51606An improper input handling vulnerability in the RTSP service…7.5
- CVE-2026-51610Incorrect access control in the RebootSystem function of TOT…4.3
- CVE-2026-51611Incorrect access control in the startSlaveReboot function of…9.8
- CVE-2026-51613Incorrect access control in the getDeviceInfo function of TO…4.3
- CVE-2026-51614Incorrect access control in the getAccessDeviceCfg function …4.3
- CVE-2026-51615Incorrect access control in the getLanCfg function of TOTOLI…7.5
- CVE-2026-51616Incorrect access control in the getWanIeCfg function of TOTO…7.5
Are you affected by CVE-2026-5161?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST