{"id":"CVE-2026-20685","title":"An attacker in a privileged network position may be able to leak sensitive information","summary":"An attacker in a privileged network position may be able to leak sensitive information. A path handling issue was addressed with improved validation. This issue is fixed in PCC Release 5E290.3.","severity":"medium","cvss":6.5,"cvssVector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cwe":["CWE-20","CWE-22"],"vendor":"apple","product":"private_cloud_compute","affected":["private_cloud_compute < 5e290.3"],"patched":["private_cloud_compute 5e290.3"],"published":"2026-05-18","updated":"2026-06-30","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-20685","references":[{"url":"https://security.apple.com/documentation/private-cloud-compute/releasenotes#darwin-init","label":"product-security@apple.com"}],"tags":["nvd","exploit-available"],"epss":0.00212,"epssPercentile":0.11827,"ingestedAt":"2026-07-01T09:50:45.828Z","exploits":{"github":1,"githubRepos":["https://github.com/HORKimhab/CVE-2026-20685"],"checkedAt":"2026-09-23T07:13:54.074Z"},"exploitAvailable":true,"slug":"CVE-2026-20685","body":"## Overview\n\nAn attacker in a privileged network position may be able to leak sensitive information. A path handling issue was addressed with improved validation. This issue is fixed in PCC Release 5E290.3.\n\n## Affected\n\n- `private_cloud_compute < 5e290.3`\n\n## Remediation\n\nUpgrade past the affected range:\n\n- `private_cloud_compute 5e290.3`","depth":"twilight","depthScore":48,"depthScoreParts":{"impact":35.8,"likelihood":0,"exploitation":12,"ransomware":0},"changes":[{"seq":4999,"id":"CVE-2026-20685","ts":1788887226791,"field":"exploit_available","old":"false","new":"true"},{"seq":3882,"id":"CVE-2026-20685","ts":1788886357854,"field":"exploit_available","old":"true","new":"false"},{"seq":2704,"id":"CVE-2026-20685","ts":1788883023044,"field":"exploit_available","old":"false","new":"true"},{"seq":1733,"id":"CVE-2026-20685","ts":1788882427546,"field":"exploit_available","old":"true","new":"false"},{"seq":839,"id":"CVE-2026-20685","ts":1788881860494,"field":"exploit_available","old":"false","new":"true"}]}