Pardus Linux Vulnerability Lets Local Attackers Gain Silent Root Access

Gbhackers •Divya • May 20, 2026

A critical privilege escalation vulnerability chain, tracked as CVE-2026-5140, has been discovered in the Pardus Linux update mechanism, allowing local users to gain full root access without authentication. The issue, rated CVSS 9.3 (Critical), affects the pardus-update package and stems from a combination of three distinct flaws that, when chained together, enable complete system compromise within seconds. Pardus Linux […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Privilege Escalation Vulnerability in Pardus Linux Discovered A critical privilege escalation vulnerability chain, tracked as CVE-2026-5140, has been identified in the Pardus Linux update mechanism. This flaw allows local users to gain full root access without authentication, posing a significant risk to systems using the pardus-update package. The vulnerability, rated CVSS 9.3 (Critical), results from a combination of three distinct flaws that can be exploited within seconds. Pardus Linux, maintained by TÜBİTAK, is widely used in government institutions and educational environments, making the impact potentially extensive. As of now, no patches have been mentioned in the articles, and the vulnerability remains unaddressed. 3 sources 72

Extracted Entities

Pardus Linux Vulnerability Lets Local Attackers Gain Silent Root Access

The full story

Extracted Entities

Attack Types (1)

CVEs (1)

CWE Weaknesses (1)

MITRE ATT&CK (1)

Platforms (1)