{"id":"CVE-2026-95652","title":"Improper Device Validation Allows Privileged Disk Formatting in TÜBİTAK BİLGEM's pardus-usb-formatter","summary":"Execution with unnecessary privileges vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute pardus-usb-formatter allows Privilege Abuse.\n\nThis issue affects pardus-usb-formatter: from 0.7.0 before 0.7.2.","severity":"medium","cvss":6.6,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H","cvssSource":"cna","cwe":["CWE-250"],"vendor":"TÜBİTAK BİLGEM Software Technologies Research Institute","product":"pardus-usb-formatter","affected":["pardus-usb-formatter >= 0.7.0 < 0.7.2"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-11-05T21:26:12.812927Z"},"published":"2026-11-05","updated":"2026-11-05","sourceUpdated":"2026-11-05T21:26:19.862Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-95652","references":[{"url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1466"}],"tags":["cve.org"],"ingestedAt":"2026-11-05T22:38:32.095Z","slug":"CVE-2026-95652","body":"## Overview\n\nExecution with unnecessary privileges vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute pardus-usb-formatter allows Privilege Abuse.\n\nThis issue affects pardus-usb-formatter: from 0.7.0 before 0.7.2.\n\n## Affected\n\n- `pardus-usb-formatter >= 0.7.0 < 0.7.2`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":36,"depthScoreParts":{"impact":36.3,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}