CVE-2026-8303
High · 7.8CVSS
7.8
EPSS
0.1%
Published
Sep 11, 2026
CISA due date
—
The record
Incorrect privilege assignment vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus-software allows Privilege Escalation. This issue affects Pardus-software: before 1.0.5.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-63349 AnyIO is a high level asynchronous concurrency and networking framework that works on top… CWE-266
- CVE-2026-62106 Subscriber Privilege Escalation in SMS Alert Order Notifications <= 3.9.9 versions. CWE-266
- CVE-2026-62102 Subscriber Privilege Escalation in Gato GraphQL <= 19.2.3 versions. CWE-266
- CVE-2026-81805 Unauthenticated Privilege Escalation in SiteSkite <= 2.1.5 versions. CWE-266
- CVE-2026-15140 A privilege-escalation issue in the Portworx Operator when deployed on Red Hat OpenShift… CWE-266
- CVE-2026-86804 A vulnerability was identified in seakee CPA-Manager-Plus up to 1.11.10. CWE-266
- CVE-2026-77654 Improper Privilege Management vulnerability in Horizon Security Analyzer (formerly… CWE-266
- CVE-2026-85400 Backend administrators without system maintainer privileges were able to schedule any of… CWE-266