Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A permissions issue was addressed with additional restrictions. This issue is fixed in Xcode 26.4. An app may be able to read arbitrary files as root.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-03-25 | 2 | Disclosure1Patch1 |
| 2026-04-04 | 1 | General1 |
⚡ New CVE Alert: CVE-2026-28889 🚨 Risk Level: Unknown 🧩 Affects: Multiple / Unspecified Products Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-28889 #CVE-2026-28889 #CVE #CyberSecurity #InfoSec https://t.co/pxRYUsx051
Post summary
The post simply announces a newly identified CVE with minimal details and no evidence of exploitation or remediation.
🔒 Alerta! A falha CVE-2026-28889 no Xcode permitia leitura de arquivos como root, expondo informações sensíveis. A correção já está disponível na versão 26.4! ⚠️ Atualize agora e mantenha seu ambiente seguro! #Cybersecurity #Xcode #AppleSecurity 👉 https://www.tenable.com/cve/CVE-2026-28889
Post summary
The post alerts that CVE‑2026‑28889 in Xcode permits root‑level file reads, poses a security risk, and that a fix is already available in version 26.4, urging users to update immediately.
CVE-2026-28889 Arbitrary File Read Vulnerability in Xcode 26.4 Prior to Patch https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-28889
Post summary
CVE-2026-28889 is an arbitrary file read vulnerability disclosed for Xcode 26.4, with details posted on Vulmon; no PoC, exploit, or patch information is provided.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | apple | xcode | - | - | - |