CVE-2026-112542: inside the macOS VPN credential-theft path
How CVE-2026-112542 exposed macOS PPPController: App Sandbox access, VPN redirection, the stored-credential path, and the evidence behind the blast radius.
The journal of Mrunal ChawdaNotes from
Notes from
closer inspection.
Security, systems, and the things I learn by building. A place to follow the question a little further.
Open the notebookOn the reading deskA selected note
CVE-2026-112542: inside the macOS VPN credential-theft path
How CVE-2026-112542 exposed macOS PPPController: App Sandbox access, VPN redirection, the stored-credential path, and the evidence behind the blast radius.
Read the articleIdeas, written down
The notebook.
3 notes
Cloudflare, fintech, and the day everything paused
A look at the dependencies behind everyday payments.
I built JWTLens: JWT security testing inside Burp Suite
The thinking behind the extension, and the validation gaps it helps explore.
No notes found.
Try another word or browse all topics.
Behind the notesAlways asking
Always asking
“what if?”
I’m Mrunal, a security researcher and open-source builder. I follow the gap between what a system promises and what it actually does.
Meet the researcherKeep a thread open
Get the RSS feed New notes. Your reader.
Follow Field Notes with your favourite RSS app.