VULNERABILITY INTELLIGENCE

CVE-2026-19755

EPSS probability0.14%
CISA KEVNot currently listed
Published2026-08-20
Last modified2026-10-26

Description

NoSleep 1.5.1 exposes a privileged XPC Mach service and accepts raw dictionary messages containing attacker-controlled command and NSBundlePath values.This issue affects NoSleep: 1.5.1.

Weakness classification

  • help@fluidattacks.com: CWE-862

Primary references