PT-2026-125169

CVE-2026-112473

Published

2026-10-26

Updated

2026-10-26

Description by

CVSS 3.1

7.4

High

MetricsAV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions macOS Golden Gate versions prior to 27.2 macOS Sequoia versions prior to 15.8.2 macOS Tahoe versions prior to 26.7.2

Description An authorization issue exists due to improper state management. An attacker possessing the legacy VNC password for Screen Sharing may be able to copy files to the Mac.

Recommendations Update macOS Golden Gate to version 27.2. Update macOS Sequoia to version 15.8.2. Update macOS Tahoe to version 26.7.2.

Exploitability

Fix

Impacts

Researchers

Alfredo Pesoli

Rev

Vendors

Affected products

Weakness enumeration

CWE-284: Improper Access Control

Related identifiers