CVE-2026-64789

MediumCVSS 5.5/10Last modified Nov 4, 2026

Description

This issue was addressed with improved validation of file attributes. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. A malicious application may bypass Gatekeeper checks.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Weakness enumeration

CWE-290

Affected software

No affected versions have been published.

Timeline

Published
Oct 26, 2026
Last modified
Nov 4, 2026
NVD status
Analyzed

Related CVEs from 2026

CVE-2026-64797.5Uncontrolled recursion in PostgreSQL SSL and GSS negotiation allows an attacker able to connect to a PostgreSQL AF_UNIX socket to achieve suCVE-2026-647907.8A path handling issue was addressed with improved validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 2CVE-2026-647918.8Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in Regular Labs Extension Manager - Administrator rouCVE-2026-647927.5Joomla Extension - regularlabs.com - disclosure of restricted content via search index in various Regular Labs extensions - Smart Search indCVE-2026-647939.1Joomla Extension - regularlabs.com - Content access and publication bypass in Articles Anywhere and Modules Anywhere extensions - Content taCVE-2026-647946.5Joomla Extension - regularlabs.com - restricted user-data exposure in Users Anywhere and Articles Anywhere extensions - User tags, filters aCVE-2026-647955.4Joomla Extension - regularlabs.com - XSS vectors in tag-provided inputs in various Regular Labs extensions - Tag-provided custom HTML, modulCVE-2026-647969.8Joomla Extension - regularlabs.com - various code injection vectors in Sourcerer extension - Free did not require both the article creator aCVE-2026-647977.5Joomla Extension - regularlabs.com - IP spoofing vulnerability in IP login extension - IP Login trusted forwarded client-IP headers without CVE-2026-647989.1Joomla Extension - regularlabs.com - Insecure login URL keys in IP login extension - Persistent URL login keys were also generated using a nCVE-2026-647997.5Joomla Extension - regularlabs.com - SSRF via remote image downloads in Articles Anywhere and Users Anywhere extensions - Content-controlledCVE-2026-648005.7In JetBrains GoLand before 2026.2 sensitive configuration values written to log files by default
CVE-2026-64789: Medium severity, CVSS 5.5 | Vulnix