Vulnerability · NVD
CVE-2026-112605
CVE-2026-112605, Severity pending severity (CVSS —): 1 tracked app concerned, 1 still exposed on its current version.
- Severity (CVSS)
- -
- Exploitation
- -
- Tracked apps
- 1
- Still exposed
- 1
This issue was addressed with improved handling of symlinks. This issue is fixed in Xcode 27.2. An app may be able to read arbitrary files.
Tracked apps referencing this CVE
For each app: the affected range, the fixing version, and where the tracked app stands today.
Vulnerable CPE configurations (1)
| Vendor | Product | Platform | Versions | CPE 2.3 URI |
|---|---|---|---|---|
| apple |
xcode All platforms (wildcard)
|
All platforms (wildcard) | <27.2 | cpe:2.3:a:apple:xcode:*:*:*:*:*:*:*:* |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.