CVE-2026-2637
Last modified
CVE-2026-2637 is a high-severity vulnerability rated 7.8/10 on the CVSS scale. iBoysoft NTFS for Mac contains a local privilege escalation vulnerability in its privileged helper daemon ntfshelperd. The daemon exposes an NSConnection service that runs as root without implementing any authentication or authorization checks. This issue affects iBoysoft NTFS: 8.0.0.. EPSS estimates a 0.17% chance of exploitation in the next 30 days.
Description
iBoysoft NTFS for Mac contains a local privilege escalation vulnerability in its privileged helper daemon ntfshelperd. The daemon exposes an NSConnection service that runs as root without implementing any authentication or authorization checks. This issue affects iBoysoft NTFS: 8.0.0.
Metrics
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Iboysoft | Ntfs For Mac | 8.0 |
References
- https://fluidattacks.com/advisories/cuartetoExploit, Third Party Advisory
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2026-2637?
How severe is CVE-2026-2637?
How do I fix CVE-2026-2637?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-26362Dell Unisphere for PowerMax, version(s) 10.2, contain(s) a R…8.1
- CVE-2026-26365Akamai Ghost on Akamai CDN edge servers before 2026-02-06 mi…4
- CVE-2026-26366eNet SMART HOME server 2.2.1 and 2.3.1 ships with default cr…9.8
- CVE-2026-26367eNet SMART HOME server 2.2.1 and 2.3.1 contains a missing au…8.1
- CVE-2026-26368eNet SMART HOME server 2.2.1 and 2.3.1 contains a missing au…8.8
- CVE-2026-26369eNet SMART HOME server 2.2.1 and 2.3.1 contains a privilege …9.8
- CVE-2026-26370WordPress Plugin "Survey Maker" versions 5.1.7.7 and prior c…6.1
- CVE-2026-26377Cross Site Scripting vulnerability in Koha 25.11 and before …5.4
- CVE-2026-26378Cross Site Scripting vulnerability in Koha 25.11 and before …5.4
- CVE-2026-26379Koha versions up to 25.11 contain a Server-Side Request Forg…6.5
- CVE-2026-2638A vulnerability in the quarantine and restore workflow of th…7.3
- CVE-2026-26396OpenBMB XAgent v1.0.0 and before is vulnerable to path trave…7.5
Are you affected by CVE-2026-2637?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST