What is CVE-2026-12386?

CVE-2026-12386 is a low-severity vulnerability in Tubitak Bilgem Software Technologies Research Institute Pardus Pen, classified under Improper Null Termination. CVSS score: 3.9/10. Published 2026-07-05.

How severe is CVE-2026-12386?

Low severity. CVSS v3 base score is 3.9 out of 10.

Vulnerability in Tubitak Bilgem Software Technologies Research Institute Pardus Pen

CVE-2026-12386

Improper null termination vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus Pen allows Overflow Buffers. This issue affects Pardus Pen: from <=4.1.5 before 4.2.1.

CVSS v3 metric

CVSS v3 base score 3.9 (Low). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:L.

Affected products

Tubitak Bilgem Software Technologies Research Institute Pardus Pen — versions <=4.1.5

Weakness classification (CWE)

CWE-170 — Improper Null Termination

References

iletisim@usom.gov.tr (government-resource)

Frequently asked questions

What is CVE-2026-12386?: CVE-2026-12386 is a low-severity vulnerability in Tubitak Bilgem Software Technologies Research Institute Pardus Pen, classified under Improper Null Termination. CVSS score: 3.9/10. Published 2026-07-05.
How severe is CVE-2026-12386?: Low severity. CVSS v3 base score is 3.9 out of 10.