Recommended action window: Monitor and triage in normal cycle
NVD description
A path traversal issue was addressed with improved path validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An attacker with control of a network directory server may be able to execute arbitrary code with root privileges.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
Apple macOS tespit ettiğim, son altı yıl içinde yayımlanan tüm sürümleri etkileyen ve kurumsal ağlarda zero-click RCE’ye yol açabilen zafiyetim, iki ayrı CVE kimliğiyle duyuruldu: CVE-2026-84570 ve CVE-2026-84568. https://support.apple.com/en-us/149035 https://t.co/0dBe2UBk42
CVE-2026-84568 is the severe boundary failure. Apple says an attacker controlling a network directory server could exploit path traversal to execute arbitrary code with root privileges.\n\nThat is server trust becoming endpoint root access. 3/7
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| OS | apple | macos | - | - | - |