CVE-2026-86871

An integer underflow was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An attacker with control of a network file server may be able to cause unexpected system termination.

• CWE-20
• CWE-190

• https://support.apple.com/en-us/149035
• https://support.apple.com/en-us/149042
• https://support.apple.com/en-us/149043

Published

Oct 20, 2026

Last Modified

Oct 20, 2026

Status

Awaiting Analysis

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-86864pgAdmin 4's Backup tool appended the client-supplied 'databa…8.8
• CVE-2026-86865Tanium addressed a SQL injection vulnerability in Asset.7.2
• CVE-2026-86867Cinnamon's Kotaemon (all versions up to and including v0.12.…6.5
• CVE-2026-86868An authentication issue was addressed with improved state ma…9.1
• CVE-2026-86869An out-of-bounds write issue was addressed with improved bou…6.5
• CVE-2026-86870A heap buffer overflow was addressed with improved bounds ch…6.5
• CVE-2026-86872A logic issue was addressed with improved state management. …5.4
• CVE-2026-86874An out-of-bounds read was addressed with improved input vali…3.3
• CVE-2026-86875An input validation issue was addressed with improved input …4.3
• CVE-2026-86876An out-of-bounds write issue was addressed with improved bou…5.2
• CVE-2026-86877A path traversal issue was addressed with improved path vali…
• CVE-2026-86878A permissions issue was addressed with additional restrictio…5.5