What is the CVSS score of CVE-2026-20699?

CVE-2026-20699 has a CVSS 3.1 base score of 6.2 (Medium). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N. EPSS exploitation probability: 0.0%.

Which versions of Jwt Attack are affected by CVE-2026-20699?

Organizations using A downgrade should be aware of moderate risk from CVE-2026-20699, a signature bypass vulnerability rated CVSS 6.2.. A patch is available.

How to fix or mitigate CVE-2026-20699?

Within 30 days: Identify affected systems and apply vendor patches as part of regular patch cycle. Monitor vendor channels for patch availability.

Jwt Attack CVE-2026-20699

EUVD-2026-15074 MEDIUM

Improper Verification of Cryptographic Signature (CWE-347)

2026-03-25 apple

GHSA-943h-6fx4-c427

Apple Information Disclosure Intel Jwt Attack macOS

6.2

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

6.2 MEDIUM

AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Attack Vector

Local

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

None

Availability

None

Lifecycle Timeline

Patch available

Apr 16, 2026 - 05:29 EUVD

14.8.5,26.3,26.4

EUVD ID Assigned

Mar 25, 2026 - 01:00 euvd

EUVD-2026-15074

Analysis Generated

Mar 25, 2026 - 01:00 vuln.today

CVE Published

Mar 25, 2026 - 00:32 nvd

MEDIUM 6.2

DescriptionCVE.org

A downgrade issue affecting Intel-based Mac computers was addressed with additional code-signing restrictions. This issue is fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.3, macOS Tahoe 26.4. An app may be able to access user-sensitive data.

AnalysisAI

A downgrade vulnerability affecting Intel-based Mac computers allows malicious applications to bypass code-signing restrictions and access user-sensitive data. The vulnerability impacts macOS Sequoia (versions before 15.7.5), macOS Sonoma (versions before 14.8.5), macOS Tahoe (versions before 26.3 and 26.4), and affects all Intel-based Mac systems running vulnerable versions. An attacker can craft an application that exploits insufficient code-signing validation to downgrade security protections and exfiltrate sensitive user information.

Technical ContextAI

This vulnerability stems from inadequate code-signing enforcement mechanisms in macOS, specifically affecting the validation and restriction of application code signatures on Intel-based architectures. The root cause involves insufficient validation of code-signing restrictions, which allows applications to circumvent security controls designed to prevent downgrade attacks. The affected products span multiple macOS versions as identified by CPE cpe:2.3:a:apple:macos:*:*:*:*:*:*:*:*, indicating a systemic issue across Intel Mac platforms. The CWE classification relates to Information Disclosure through improper access control, where the downgrade mechanism permits unauthorized access to protected user data by allowing applications to execute with reduced security contexts.

RemediationAI

Users should immediately update to patched macOS versions: macOS Sequoia 15.7.5 or later, macOS Sonoma 14.8.5 or later, or macOS Tahoe 26.3 or later (depending on the currently installed version). Navigate to System Settings, select General, then Software Update, and install all available updates. For enterprise environments, deploy macOS updates through Mobile Device Management (MDM) or Software Update Services to ensure consistent patching across Intel-based Mac fleets. Until patching is completed, limit execution of untrusted applications and enforce code-signing verification through Gatekeeper settings. Refer to Apple's official security advisory links (https://support.apple.com/en-us/126348, https://support.apple.com/en-us/126794, https://support.apple.com/en-us/126795, https://support.apple.com/en-us/126796) for detailed patch notes and affected software versions.