Moole Vulnerability Database

Find real vulnerabilities before they ship

Medium

CVE-2026-20685

An attacker in a privileged network position may be able to leak sensitive information. A path handling issue was addressed with improved validation. This issue is fixed in PCC Release 5E290.3.

VectorADJACENT_NETWORK

PublishedMay 18, 2026, 16:16

Published Byproduct-security@apple.com

Base Score

Score6.5

Affected Versions

No affected versions found.

References

https://security.apple.com/documentation/private-cloud-compute/releasenotes#darwin-init

Weakness Type

CWE-20

CVSS Metrics

Base Score

6.5

Vector String

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Base SeverityMedium

Version

3.1

Attack Vector (AV)

ADJACENT_NETWORK