CVE-2026-28899Disclosure(apple / macos)

LOWCVSS 5.5 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A logic issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.6, macOS Tahoe 26.7. An app may bypass Gatekeeper checks.

0.0/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-693

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • macos

Threat summary

  • 2 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Technical details provided in 1 signal
  • Disclosure: 2 classified signals
  • Peaked 1d ago at 1 mentions (2026-09-16); latest day: 1
  • 2 total mentions across 2 days

Affected systems

Vendors
Products
macos

Deep dive

Activity timeline2 mentions / 2d
00111Mentions · 2026-09-16: 1Mentions · 2026-10-06: 1Technical Details · 2026-10-06: 109-1610-06
Signal classification1 categories
Disclosure
2100.0%
Full discourse2 posts
  • mayllart@ThiagoMayllart
    Disclosure

    Oh yeah baby! 2 Gatekeeper bypass CVEs awarded: CVE-2026-84579 and CVE-2026-28899. More to come on this soon! Let's goooooo! https://t.co/tcLo4bgMt2

    Post summary

    The tweet announces two Gatekeeper bypass CVEs (CVE-2026-84579 and CVE-2026-28899) without providing technical details, patches, or evidence of active exploitation.

    731882010.9K
    267 followersView on X
  • dj xmoura no som do cento e trinta@xmouraWAV
    Disclosure

    @pedra_lee @docfarlley @AliScrazy1 @olivernoronha @TSEjusbr CVE-2015-5839 CVE-2015-3803 CVE-2018-4175 CVE-2026-43813 CVE-2026-65399 CVE-2026-65383 CVE-2026-28899 CVE-2025-43521 todos os cve referentes a ataque de code snipping para execução de código arbitrário. todos eles baseado em uma camada de software que não existe na urna(+)

    Post summary

    The tweet lists several CVEs and describes them as code‑snipping exploits that enable arbitrary code execution, but provides no PoC, exploit tool, active exploitation claim, patch, or detailed technical data beyond the generic description.

    1000037
    18 followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
OSapplemacos---

Explore more