{"affected":[{"defaultStatus":"unaffected","product":"Pardus Package Installer","source":"CNA: TR-CERT","vendor":"TÜBİTAK BİLGEM Yazılım Teknolojileri Araştırma Enstitüsü","versions":[{"lessThan":"0.7.1","status":"affected","version":"0.7.0","versionType":"semver"}]}],"cveId":"CVE-2026-95518","cwes":["CWE-367"],"description":"Time-of-check time-of-use (TOCTOU) race condition vulnerability in TÜBİTAK BİLGEM Yazılım Teknolojileri Araştırma Enstitüsü Pardus Package Installer allows Leveraging Time-of-Check and Time-of-Use (TOCTOU) Race Conditions.\n\nThis issue affects Pardus Package Installer: from 0.7.0 before 0.7.1.","epss":null,"exploits":[],"kev":null,"metrics":[{"score":7,"severity":"high","source":"CNA: TR-CERT","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","version":"3.1"}],"modifiedAt":1794577195013,"publishedAt":1794574484462,"references":[{"source":"CNA: TR-CERT","tags":["government-resource"],"url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1539"}],"remediation":[],"revision":"50f89690d573b1070772034be8c68b812d9606d7165c827686fd0827e5e3684d","sources":[{"modifiedAt":1794577195013,"name":"CNA: TR-CERT","retrievedAt":1794579041040,"url":"https://www.cve.org/CVERecord?id=CVE-2026-95518"}],"ssvc":null,"status":"published","title":"TOCTOU Race Condition in TÜBİTAK BİLGEM's Pardus Package Installer","updatedAt":1794579041040}