VULNERABILITY INTELLIGENCE
CVE-2026-2638
EPSS probability0.08%
CISA KEVNot currently listed
Published2026-06-09
Last modified2026-07-23
Description
A vulnerability in the quarantine and restore workflow of the X-VPN macOS website versions 77.0 through 77.5 allow a local attacker to leverage a race condition and symlink manipulation to achieve privileged file corruption.
Weakness classification
- help@fluidattacks.com: CWE-367