PT-2026-41679 · Pcc · Pcc

Published 2026-05-18 · Updated 2026-05-18 · CVE-2026-20685

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions PCC versions prior to 5E290.3

Description A path handling issue exists where an attacker in a privileged network position may be able to leak sensitive information. This is caused by insufficient validation during path processing.

Recommendations Update to version 5E290.3.

Fix

Path traversal

RCE

Weakness Enumeration

CWE-22

CWE-20

Related Identifiers

CVE-2026-20685

Affected Products

Pcc

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2026-20685 · Security Note
• https://twitter.com/VulmonFeeds/status/2056420177693008297 · Twitter Post
• https://security.apple.com/documentation/private-cloud-compute/releasenotes#darwin-init · Note
• https://t.me/CVEtracker/54138 · Telegram Post