# CVE-2026-92886: Local Privilege Escalation via Polkit Misconfiguration in TÜBİTAK BİLGEM's eta-register

Status: published. Published: 2026-11-02. Updated: 2026-11-02.

Missing Authorization vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute eta-register allows Privilege Escalation.

This issue affects eta-register: from 2.0.8 before 2.0.9.

## Remediation

No remediation reported in collected sources

## Affected products and versions

- TÜBİTAK BİLGEM Software Technologies Research Institute / eta-register: ≥ 2.0.8; < 2.0.9 (affected, semver). Source: CNA: TR-CERT

## Severity and prioritization

- CVSS 3.1: 7.8 (high); CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H; source: CNA: TR-CERT

- CISA KEV: No listing in collected sources

- EPSS: Not available

- SSVC: Not available

- Weaknesses: CWE-862

## Exploit evidence

No exploit evidence in collected sources. This is not proof of no exploitation.

## References

- https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1440 (CNA: TR-CERT; government-resource)

## Provenance

- CNA: TR-CERT: https://www.cve.org/CVERecord?id=CVE-2026-92886; retrieved 2026-11-02; source updated 2026-11-02

Revision: 6b03e3c4d5f54049f482b6aab925553271f1cf1c51de2ac0995e1e28e726e686

Canonical: https://y2.dev/cve/CVE-2026-92886