CVE-2026-15599 Arbitrary Process Termination in TÜBİTAK BİLGEM's pardus-domain-joiner
An unverified ownership flaw in Pardus domain joiner allows attackers to terminate arbitrary processes, leading to privilege abuse.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2026-15599?
CVE-2026-15599 is a low-severity vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute pardus-domain-joiner, published on 6 Aug 2026. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
Unverified ownership vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute pardus-domain-joiner allows Privilege Abuse.
This issue affects pardus-domain-joiner: before 0.5.5.
Weakness: CWE-283
Which versions are affected by CVE-2026-15599?
How do I fix CVE-2026-15599?
No fix has been published for CVE-2026-15599 yet. Limit exposure of the affected software until one is available.
Is CVE-2026-15599 being exploited?
There is no known exploitation of CVE-2026-15599 in the wild and no public exploit code.
Sources
Also known as GHSA-6cpw-v4wr-4622.