CVE-2026-112542

LOW

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. A malicious app may be able to intercept network traffic.

Back to dashboard

0.0/ 10 priority

Sources & remediation

Other references

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

1 mentions across 1 observed day

What's happening

1 total mentions across 1 day

Deep dive

Activity timeline1 mentions / 1d

Full discourse1 post

0xmru 🇮🇳@mrunal1101d
Apple has credited me for CVE-2026-112542! On Macs with a configured PPP/L2TP VPN, a sandboxed app could bypass PPPController authorization, redirect pppd/racoon traffic to an attacker-controlled server, silently trigger System Keychain cred retrieval, and tear down VPN sessions https://t.co/FF00v2AvYn
3003141.9K
1.2K followersView on X

Explore more

Back to dashboard