CVE-2022-26688

An issue in the handling of symlinks was addressed with improved validation. This issue is fixed in Security Update 2022-003 Catalina, macOS Monterey 12.3, macOS Big Sur 11.6.5. A malicious app with root privileges may be able to modify the contents of system files.

• CWE-59

• https://support.apple.com/en-us/HT213183Release Notes, Vendor Advisory
• https://support.apple.com/en-us/HT213184Release Notes, Vendor Advisory
• https://support.apple.com/en-us/HT213185Release Notes, Vendor Advisory
• https://support.apple.com/en-us/HT213183Release Notes, Vendor Advisory
• https://support.apple.com/en-us/HT213184Release Notes, Vendor Advisory
• https://support.apple.com/en-us/HT213185Release Notes, Vendor Advisory

Published

May 26, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-26672ASUS WebStorage has a hardcoded API Token in the APP source …9.8
• CVE-2022-26673ASUS RT-AX88U has insufficient filtering for special charact…5.4
• CVE-2022-26674ASUS RT-AX88U has a Format String vulnerability, which allow…9.8
• CVE-2022-26675aEnrich a+HRD has inadequate filtering for special character…7.5
• CVE-2022-26676aEnrich a+HRD has inadequate privilege restrictions, an unau…9.8
• CVE-2022-2668An issue was discovered in Keycloak that allows arbitrary Ja…7.2
• CVE-2022-26689Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2022-2669The WP Taxonomy Import WordPress plugin through 1.0.4 does n…6.1
• CVE-2022-26690Description: A race condition was addressed with additional …4.7
• CVE-2022-26691A logic issue was addressed with improved state management. …6.7
• CVE-2022-26692Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2022-26693This issue was addressed with improved checks. This issue is…9.1