CVE Watch6 ago 2026

CVE-2026-15599

Unverified ownership vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute pardus-domain-joiner allows Privilege Abuse.

CVSS

3.3

Bajo

EPSS

—

KEV

—

Exploit Today

—

0-100

Publicado: 6 ago 2026 · Última mod.: 6 ago 2026 · CWE-283

EPSS · 30d

Sin historial EPSS suficiente todavía.

Descripción técnica

Unverified ownership vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute pardus-domain-joiner allows Privilege Abuse. This issue affects pardus-domain-joiner: before 0.5.5.

Referencias oficiales

siberguvenlik.gov.trhttps://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0770

CVEs relacionados

CVECVSSEPSSKEVRExplotTítuloVis.

CVE-2026-209129.1 CRÍ

34.1%

——10Gitea does not properly validate repository ownership when linking attachments to releases. An attachment uploaded to a private repository could potentially be linked to a release in a different public repository, making it accessible to unauthorized users.23d