CVE-2026-20601

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Tahoe 26.3. An app may be able to monitor keystrokes without user permission.

• CWE-284

• https://support.apple.com/en-us/126348Release Notes, Vendor Advisory

Published

Feb 11, 2026

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-2055A weakness has been identified in D-Link DIR-605L and DIR-61…7.5
• CVE-2026-2056A security vulnerability has been detected in D-Link DIR-605…7.5
• CVE-2026-2057A vulnerability was detected in SourceCodester Medical Cente…9.8
• CVE-2026-2058A flaw has been found in mathurvishal CloudClassroom-PHP-Pro…9.8
• CVE-2026-2059A vulnerability has been found in SourceCodester Medical Cen…9.8
• CVE-2026-2060A vulnerability was found in code-projects Simple Blood Dono…9.8
• CVE-2026-20602The issue was addressed with improved handling of caches. Th…5.5
• CVE-2026-20603This issue was addressed with improved redaction of sensitiv…4.4
• CVE-2026-20605The issue was addressed with improved memory handling. This …4.6
• CVE-2026-20606This issue was addressed by removing the vulnerable code. Th…7.1
• CVE-2026-20607A permissions issue was addressed with additional restrictio…4
• CVE-2026-20608This issue was addressed through improved state management. …5.5