{"id":4145,"date":"2026-08-19T01:22:07","date_gmt":"2026-08-18T16:22:07","guid":{"rendered":"https:\/\/h4ck.kr\/?p=4145"},"modified":"2026-08-19T01:22:08","modified_gmt":"2026-08-18T16:22:08","slug":"1day-cve-2026-28915-cupsd-%eb%b6%80%ec%a0%81%ec%a0%88%ed%95%9c-%ea%b2%bd%eb%a1%9c-%ec%b2%98%eb%a6%ac%ec%97%90-%eb%94%b0%eb%a5%b8-%ec%b7%a8%ec%95%bd%ec%a0%90-%ec%9d%b5%ec%8a%a4-%ea%b0%80%eb%8a%a5","status":"publish","type":"post","link":"https:\/\/h4ck.kr\/?p=4145","title":{"rendered":"[1day] CVE-2026-28915: cupsd: \ubd80\uc801\uc808\ud55c \uacbd\ub85c \ucc98\ub9ac\uc5d0 \ub530\ub978 \ucde8\uc57d\uc810 (\uc775\uc2a4 \uac00\ub2a5\uc131 X)"},"content":{"rendered":"\n<h1 class=\"wp-block-heading\">\uac1c\uc694<\/h1>\n\n\n\n<p class=\"wp-block-paragraph\">\ud574\ub2f9 \ucde8\uc57d\uc810\uc740 \ub2e4\uc74c \ubc84\uc804\uc5d0\uc11c \ud328\uce58\ub418\uc5c8\ub2e4.<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>macOS Tahoe 26.5<\/li>\n\n\n\n<li>macOS Sequoia 15.7.7<\/li>\n\n\n\n<li>macOS Sonoma 14.8.7<\/li>\n<\/ul>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"346\" src=\"https:\/\/h4ck.kr\/wp-content\/uploads\/2026\/08\/Screenshot-2026-07-11-at-4.22.42-PM-1024x346.png\" alt=\"\" class=\"wp-image-4146\" srcset=\"https:\/\/h4ck.kr\/wp-content\/uploads\/2026\/08\/Screenshot-2026-07-11-at-4.22.42-PM-1024x346.png 1024w, https:\/\/h4ck.kr\/wp-content\/uploads\/2026\/08\/Screenshot-2026-07-11-at-4.22.42-PM-300x101.png 300w, https:\/\/h4ck.kr\/wp-content\/uploads\/2026\/08\/Screenshot-2026-07-11-at-4.22.42-PM-768x260.png 768w, https:\/\/h4ck.kr\/wp-content\/uploads\/2026\/08\/Screenshot-2026-07-11-at-4.22.42-PM.png 1360w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">macOS 26.4.1, macOS 26.5\uc5d0\uc11c \uac01\uac01 cups \uad00\ub828 \ubc14\uc774\ub108\ub9ac 8\uac1c\ub97c Bindiff\ub85c \ub514\ud551\ud574\ubcf4\uc558\ub2e4.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"826\" height=\"326\" src=\"https:\/\/h4ck.kr\/wp-content\/uploads\/2026\/08\/Screenshot-2026-07-11-at-4.22.56-PM.png\" alt=\"\" class=\"wp-image-4147\" srcset=\"https:\/\/h4ck.kr\/wp-content\/uploads\/2026\/08\/Screenshot-2026-07-11-at-4.22.56-PM.png 826w, https:\/\/h4ck.kr\/wp-content\/uploads\/2026\/08\/Screenshot-2026-07-11-at-4.22.56-PM-300x118.png 300w, https:\/\/h4ck.kr\/wp-content\/uploads\/2026\/08\/Screenshot-2026-07-11-at-4.22.56-PM-768x303.png 768w\" sizes=\"auto, (max-width: 826px) 100vw, 826px\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">\uadf8 \uacb0\uacfc, \ub2e4\ub978 \ubc14\uc774\ub108\ub9ac\ub4e4\uc740 \uac70\uc758 \uadf8\ub300\ub85c\uc600\uc9c0\ub9cc<br>cupsd\uc5d0\uc11c 3\uac1c\uc758 \ud568\uc218\uc5d0 \ubcc0\ud654\uac00 \uc0dd\uae34\uac83\uc744 \uc54c \uc218 \uc788\uc5c8\ub2e4.<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"62\" src=\"https:\/\/h4ck.kr\/wp-content\/uploads\/2026\/08\/Screenshot-2026-07-11-at-4.25.28-PM-1024x62.png\" alt=\"\" class=\"wp-image-4149\" srcset=\"https:\/\/h4ck.kr\/wp-content\/uploads\/2026\/08\/Screenshot-2026-07-11-at-4.25.28-PM-1024x62.png 1024w, https:\/\/h4ck.kr\/wp-content\/uploads\/2026\/08\/Screenshot-2026-07-11-at-4.25.28-PM-300x18.png 300w, https:\/\/h4ck.kr\/wp-content\/uploads\/2026\/08\/Screenshot-2026-07-11-at-4.25.28-PM-768x46.png 768w, https:\/\/h4ck.kr\/wp-content\/uploads\/2026\/08\/Screenshot-2026-07-11-at-4.25.28-PM-1536x92.png 1536w, https:\/\/h4ck.kr\/wp-content\/uploads\/2026\/08\/Screenshot-2026-07-11-at-4.25.28-PM-2048x123.png 2048w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">cupsd \ubc14\uc774\ub108\ub9ac\ub294 \uc560\ud50c\uc5d0\uc11c \uc18c\uc2a4\ub97c \uacf5\uac1c\ud558\uace0 \uc788\uae30 \ub54c\ubb38\uc5d0, \ud2b9\uc815 \ubc84\uc804 \ube0c\ub79c\uce58\ub97c \ucc38\uace0\ud558\uc5ec \ub514\ucef4\ud30c\uc77c \uc5c6\uc774 \uc18c\uc2a4\ucf54\ub4dc\ub97c \uc9c1\uc811 \uc0b4\ud3b4\ubcfc \uc218\ub3c4 \uc788\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">cups \ubc84\uc804\uc744 \ube44\uad50\ud574\ubcf4\uba74, \ucde8\uc57d\uc810\uc774 \ud328\uce58\ub41c \ubc84\uc804\uc740 522.4\uc774\uba70, \ucde8\uc57d\uc810\uc774 \ud328\uce58\ub418\uae30 \uc804 \ubc84\uc804\uc740 522.3\uc774\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/github.com\/apple-oss-distributions\/cups\">https:\/\/github.com\/apple-oss-distributions\/cups<\/a><\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>seo@seos-MacBook-Air ~ % otool -l \/Users\/seo\/Desktop\/macOS-1day\/26.4.1_vs_26.5\/26.5\/cupsd  | grep -A3 LC_SOURCE_VERSION\n      cmd LC_SOURCE_VERSION\n  cmdsize 16\n  version 522.4\nLoad command 13\nseo@seos-MacBook-Air ~ % otool -l \/Users\/seo\/Desktop\/macOS-1day\/26.4.1_vs_26.5\/26.4.1\/cupsd  | grep -A3 LC_SOURCE_VERSION\n      cmd LC_SOURCE_VERSION\n  cmdsize 16\n  version 522.3\nLoad command 13\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\uc774\ub97c \ud1b5\ud574 \uac01\uac01 \ud328\uce58 \uc774\uc804 \ubc14\uc774\ub108\ub9ac\uc758 <code>sub_10000BA94<\/code>\uc640 \ud328\uce58 \uc774\ud6c4 \ubc14\uc774\ub108\ub9ac\uc758 <code>sub_1000432B4<\/code>\ub294 \uc804\ubd80<br><code>int cupsdCheckPermissions(char *filename, const char *suffix, int mode, uid_t user, gid_t group, int is_dir, int create_dir);<\/code> \ud568\uc218\ub97c \uac00\ub9ac\ud0a8\ub2e4.<\/p>\n\n\n\n<h1 class=\"wp-block-heading\">\ubc1c\uc0dd \uc6d0\uc778<\/h1>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/github.com\/apple-oss-distributions\/cups\/commit\/1ad81db3e0d8d58e4059316b7901622c186f4970#diff-2afdafb1964dae5e266532db35b2188fac5cadd6bc56f8770b4cc590c0865287R266\">\ud328\uce58\ub41c \ucee4\ubc0b<\/a>\uc744 \ube44\uad50\ud574\ubd24\uc744\ub54c, \ucd08\uae30\uc5d0 <code>snprintf<\/code> \uacfc\uc815\uc5d0\uc11c \uc798\ubabb\ub418\uc5c8\ub2e4.<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"321\" src=\"https:\/\/h4ck.kr\/wp-content\/uploads\/2026\/08\/Screenshot-2026-07-11-at-4.45.10-PM-1024x321.png\" alt=\"\" class=\"wp-image-4150\" srcset=\"https:\/\/h4ck.kr\/wp-content\/uploads\/2026\/08\/Screenshot-2026-07-11-at-4.45.10-PM-1024x321.png 1024w, https:\/\/h4ck.kr\/wp-content\/uploads\/2026\/08\/Screenshot-2026-07-11-at-4.45.10-PM-300x94.png 300w, https:\/\/h4ck.kr\/wp-content\/uploads\/2026\/08\/Screenshot-2026-07-11-at-4.45.10-PM-768x241.png 768w, https:\/\/h4ck.kr\/wp-content\/uploads\/2026\/08\/Screenshot-2026-07-11-at-4.45.10-PM-1536x482.png 1536w, https:\/\/h4ck.kr\/wp-content\/uploads\/2026\/08\/Screenshot-2026-07-11-at-4.45.10-PM.png 1582w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>\ud328\uce58 \uc774\uc804<\/strong> <code>snprintf<\/code> \ud568\uc218\ub97c \uc0b4\ud3b4\ubcf4\uba74, <code>__str<\/code>\uc5d0\uc11c <code>filename<\/code>\uacfc <code>suffix<\/code>\uc640 \uc11c\ub85c \ud569\uccd0\uc838\uc11c \ub9cc\ub4e4\uc5b4\uc9c8 \uc218 \uc788\ub294 \uc2e4\uc81c \ubb38\uc790\uc5f4\uc740 <code>\\x00<\/code>\uc744 \uc81c\uc678\ud588\uc744\ub54c \ucd1d 1023\uc790\uc774\ub2e4. \ud558\uc9c0\ub9cc <code>filename<\/code>\uc774 <code>suffix<\/code> \uae38\uc774\ubcf4\ub2e4 \ud6e8\uc52c \ud074 \uacbd\uc6b0, suffix\uac00 \uc628\uc804\ud788 \ub2f4\uae30\uc9c0 \ubabb\ud558\uace0 \uc798\ub824\ubc84\ub9ac\ub294 \ubb38\uc81c\uac00 \ubc1c\uc0dd\ud55c\ub2e4.<\/li>\n<\/ul>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"950\" src=\"https:\/\/h4ck.kr\/wp-content\/uploads\/2026\/08\/Screenshot-2026-07-11-at-4.52.04-PM-1024x950.png\" alt=\"\" class=\"wp-image-4151\" srcset=\"https:\/\/h4ck.kr\/wp-content\/uploads\/2026\/08\/Screenshot-2026-07-11-at-4.52.04-PM-1024x950.png 1024w, https:\/\/h4ck.kr\/wp-content\/uploads\/2026\/08\/Screenshot-2026-07-11-at-4.52.04-PM-300x278.png 300w, https:\/\/h4ck.kr\/wp-content\/uploads\/2026\/08\/Screenshot-2026-07-11-at-4.52.04-PM-768x713.png 768w, https:\/\/h4ck.kr\/wp-content\/uploads\/2026\/08\/Screenshot-2026-07-11-at-4.52.04-PM-1536x1425.png 1536w, https:\/\/h4ck.kr\/wp-content\/uploads\/2026\/08\/Screenshot-2026-07-11-at-4.52.04-PM.png 1694w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>\ud328\uce58 \uc774\ud6c4<\/strong><br><code>snprintf<\/code> \ubc18\ud658\uac12\uc740 \ubc84\ud37c\uc758 \ud06c\uae30\uc778 0x400\uacfc \ubb34\uad00\ud558\uac8c, \ud569\uce58\uba74\uc11c \uc798\ub9ac\uc9c0 \uc54a\uc558\uc744 \ub54c \uc0dd\uc131\ub418\uc5c8\uc744 \uc6d0\ub798 \ubb38\uc790\uc5f4\uc758 \uc804\uccb4 \uae38\uc774\ub97c \ubc18\ud658\ud55c\ub2e4. \uc798\ub9b0 \ubd88\uc644\uc804\ud55c \uacbd\ub85c\uc778\uc9c0 \ud310\ub2e8\ud558\uae30 \uc704\ud574 0x3ff \uae38\uc774\ubcf4\ub2e4 \ud06c\ub2e4\uba74, \ub354\uc774\uc0c1 \uc9c4\ud589\ud558\uc9c0 \uc54a\uace0 -1\uc744 \ubc18\ud658\ud55c\ub2e4.<\/li>\n<\/ul>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"941\" src=\"https:\/\/h4ck.kr\/wp-content\/uploads\/2026\/08\/Screenshot-2026-07-11-at-4.51.16-PM-1024x941.png\" alt=\"\" class=\"wp-image-4152\" srcset=\"https:\/\/h4ck.kr\/wp-content\/uploads\/2026\/08\/Screenshot-2026-07-11-at-4.51.16-PM-1024x941.png 1024w, https:\/\/h4ck.kr\/wp-content\/uploads\/2026\/08\/Screenshot-2026-07-11-at-4.51.16-PM-300x276.png 300w, https:\/\/h4ck.kr\/wp-content\/uploads\/2026\/08\/Screenshot-2026-07-11-at-4.51.16-PM-768x706.png 768w, https:\/\/h4ck.kr\/wp-content\/uploads\/2026\/08\/Screenshot-2026-07-11-at-4.51.16-PM-1536x1411.png 1536w, https:\/\/h4ck.kr\/wp-content\/uploads\/2026\/08\/Screenshot-2026-07-11-at-4.51.16-PM.png 1722w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<h1 class=\"wp-block-heading\">\uc545\uc6a9 \uac00\ub2a5\uc131<\/h1>\n\n\n\n<p class=\"wp-block-paragraph\">\ucde8\uc57d\ud55c \ud568\uc218\uc778 <code>cupsdCheckPermissions<\/code>\uac00 \ud638\ucd9c\ub418\ub294 \uacf3\uc740 \ucd1d 15\uad70\ub370\uc600\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><code>cupsdCheckLogFile<\/code>\uacfc <code>cupsdReadConfiguration<\/code> 2\uac1c\uc758 \ud568\uc218\uc5d0\uc11c \ubc1c\uacac\ud560 \uc218 \uc788\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><code>cupsdCheckLogFile<\/code> \uc5d0\uc11c\ub294 <code>filename<\/code>\uacfc <code>suffix<\/code>\uac00 \uc774\ubbf8 \uc815\ud574\uc838\uc788\uc73c\ubbc0\ub85c, \ub118\uc5b4\uac00\uc790.<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"323\" src=\"https:\/\/h4ck.kr\/wp-content\/uploads\/2026\/08\/Screenshot-2026-07-11-at-5.12.08-PM-1024x323.png\" alt=\"\" class=\"wp-image-4153\" srcset=\"https:\/\/h4ck.kr\/wp-content\/uploads\/2026\/08\/Screenshot-2026-07-11-at-5.12.08-PM-1024x323.png 1024w, https:\/\/h4ck.kr\/wp-content\/uploads\/2026\/08\/Screenshot-2026-07-11-at-5.12.08-PM-300x95.png 300w, https:\/\/h4ck.kr\/wp-content\/uploads\/2026\/08\/Screenshot-2026-07-11-at-5.12.08-PM-768x242.png 768w, https:\/\/h4ck.kr\/wp-content\/uploads\/2026\/08\/Screenshot-2026-07-11-at-5.12.08-PM-1536x485.png 1536w, https:\/\/h4ck.kr\/wp-content\/uploads\/2026\/08\/Screenshot-2026-07-11-at-5.12.08-PM-2048x646.png 2048w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\"><code>CacheDir<\/code>\uac12\uc774\ub098 <code>ServerRoot<\/code>\uac12\uc740 <code>\/private\/etc\/cups\/cups-file.conf<\/code> \ud30c\uc77c \ub0b4\uc6a9\uc744 \ubcc0\uacbd\ud558\uc5ec \uc784\uc758\ub85c \uc124\uc815\ud560 \uc218 \uc788\ub2e4. \ud558\uc9c0\ub9cc \uc774\ub9c8\uc800\ub3c4 root \uad8c\ud55c\uc774 \ud544\uc694\ud558\ub2e4.<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"838\" src=\"https:\/\/h4ck.kr\/wp-content\/uploads\/2026\/08\/Screenshot-2026-07-11-at-5.10.09-PM-1024x838.png\" alt=\"\" class=\"wp-image-4154\" srcset=\"https:\/\/h4ck.kr\/wp-content\/uploads\/2026\/08\/Screenshot-2026-07-11-at-5.10.09-PM-1024x838.png 1024w, https:\/\/h4ck.kr\/wp-content\/uploads\/2026\/08\/Screenshot-2026-07-11-at-5.10.09-PM-300x246.png 300w, https:\/\/h4ck.kr\/wp-content\/uploads\/2026\/08\/Screenshot-2026-07-11-at-5.10.09-PM-768x629.png 768w, https:\/\/h4ck.kr\/wp-content\/uploads\/2026\/08\/Screenshot-2026-07-11-at-5.10.09-PM-1536x1257.png 1536w, https:\/\/h4ck.kr\/wp-content\/uploads\/2026\/08\/Screenshot-2026-07-11-at-5.10.09-PM.png 1764w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"316\" src=\"https:\/\/h4ck.kr\/wp-content\/uploads\/2026\/08\/Screenshot-2026-07-11-at-5.11.14-PM-1024x316.png\" alt=\"\" class=\"wp-image-4155\" srcset=\"https:\/\/h4ck.kr\/wp-content\/uploads\/2026\/08\/Screenshot-2026-07-11-at-5.11.14-PM-1024x316.png 1024w, https:\/\/h4ck.kr\/wp-content\/uploads\/2026\/08\/Screenshot-2026-07-11-at-5.11.14-PM-300x93.png 300w, https:\/\/h4ck.kr\/wp-content\/uploads\/2026\/08\/Screenshot-2026-07-11-at-5.11.14-PM-768x237.png 768w, https:\/\/h4ck.kr\/wp-content\/uploads\/2026\/08\/Screenshot-2026-07-11-at-5.11.14-PM-1536x474.png 1536w, https:\/\/h4ck.kr\/wp-content\/uploads\/2026\/08\/Screenshot-2026-07-11-at-5.11.14-PM.png 2046w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">\uc2dc\ub3c4\ud574\ubcf8 \uacb0\uacfc, \uc544\uc27d\uac8c\ub3c4 \ud30c\uc77c \uc774\ub984 \uc790\uccb4\uac00 \uae38\uc5b4\uc11c \uc2e4\ud328\ud55c\ub2e4. \uc545\uc6a9\ub420 \uac00\ub2a5\uc131\uc774 \uadf9\ud788 \ub0ae\uc544\ubcf4\uc778\ub2e4.<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>import os\n\n# Init\ntarget = 1022\nbase = \"\/tmp\"\nmax_chunk = 200\n\n# Chdir base\nos.chdir(base)\ncurrent_len = len(base)\nfull_path = base\n\n# Mkdir and cd sequentially\nwhile True:\n    rem = target - current_len - 1\n    if rem &lt;= 0:\n        break\n\n    chunk = \"A\" * min(max_chunk, rem)\n\n    # Mkdir\n    if not os.path.exists(chunk):\n        os.mkdir(chunk)\n\n    # Cd\n    os.chdir(chunk)\n\n    # Update path string\n    full_path += \"\/\" + chunk\n    current_len += 1 + len(chunk)\n\n# Check\nprint(full_path)\nprint(len(full_path))\n<\/code><\/pre>\n\n\n\n<pre class=\"wp-block-code\"><code>seo@seos-Virtual-Machine ~ % sudo cupsd -t\nUnable to get file information for \"\/tmp\/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA\/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA\/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA\/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA\/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA\/AAAAAAAAAAAA\/\" - File name too long\nUnable to open job cache file \"\/tmp\/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA\/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA\/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA\/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA\/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA\/AAAAAAAAAAAA\/\": File name too long\n\"\/private\/etc\/cups\/cups-files.conf\" is OK.\n\"\/private\/etc\/cups\/cupsd.conf\" is O\n<\/code><\/pre>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"234\" src=\"https:\/\/h4ck.kr\/wp-content\/uploads\/2026\/08\/Screenshot-2026-07-11-at-6.11.50-PM-1024x234.png\" alt=\"\" class=\"wp-image-4157\" srcset=\"https:\/\/h4ck.kr\/wp-content\/uploads\/2026\/08\/Screenshot-2026-07-11-at-6.11.50-PM-1024x234.png 1024w, https:\/\/h4ck.kr\/wp-content\/uploads\/2026\/08\/Screenshot-2026-07-11-at-6.11.50-PM-300x68.png 300w, https:\/\/h4ck.kr\/wp-content\/uploads\/2026\/08\/Screenshot-2026-07-11-at-6.11.50-PM-768x175.png 768w, https:\/\/h4ck.kr\/wp-content\/uploads\/2026\/08\/Screenshot-2026-07-11-at-6.11.50-PM-1536x350.png 1536w, https:\/\/h4ck.kr\/wp-content\/uploads\/2026\/08\/Screenshot-2026-07-11-at-6.11.50-PM-2048x467.png 2048w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"97\" src=\"https:\/\/h4ck.kr\/wp-content\/uploads\/2026\/08\/Screenshot-2026-07-11-at-6.12.27-PM-1024x97.png\" alt=\"\" class=\"wp-image-4156\" srcset=\"https:\/\/h4ck.kr\/wp-content\/uploads\/2026\/08\/Screenshot-2026-07-11-at-6.12.27-PM-1024x97.png 1024w, https:\/\/h4ck.kr\/wp-content\/uploads\/2026\/08\/Screenshot-2026-07-11-at-6.12.27-PM-300x28.png 300w, https:\/\/h4ck.kr\/wp-content\/uploads\/2026\/08\/Screenshot-2026-07-11-at-6.12.27-PM-768x72.png 768w, https:\/\/h4ck.kr\/wp-content\/uploads\/2026\/08\/Screenshot-2026-07-11-at-6.12.27-PM-1536x145.png 1536w, https:\/\/h4ck.kr\/wp-content\/uploads\/2026\/08\/Screenshot-2026-07-11-at-6.12.27-PM-2048x193.png 2048w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n","protected":false},"excerpt":{"rendered":"<p>\uac1c\uc694 \ud574\ub2f9 \ucde8\uc57d\uc810\uc740 \ub2e4\uc74c \ubc84\uc804\uc5d0\uc11c \ud328\uce58\ub418\uc5c8\ub2e4. macOS 26.4.1, macOS 26.5\uc5d0\uc11c \uac01\uac01 cups \uad00\ub828 \ubc14\uc774\ub108\ub9ac 8\uac1c\ub97c Bindiff\ub85c \ub514\ud551\ud574\ubcf4\uc558\ub2e4. \uadf8 \uacb0\uacfc, \ub2e4\ub978 \ubc14\uc774\ub108\ub9ac\ub4e4\uc740 \uac70\uc758 \uadf8\ub300\ub85c\uc600\uc9c0\ub9cccupsd\uc5d0\uc11c 3\uac1c\uc758 \ud568\uc218\uc5d0 \ubcc0\ud654\uac00 \uc0dd\uae34\uac83\uc744 \uc54c \uc218 \uc788\uc5c8\ub2e4. cupsd \ubc14\uc774\ub108\ub9ac\ub294 \uc560\ud50c\uc5d0\uc11c \uc18c\uc2a4\ub97c \uacf5\uac1c\ud558\uace0 \uc788\uae30 \ub54c\ubb38\uc5d0, \ud2b9\uc815 \ubc84\uc804 \ube0c\ub79c\uce58\ub97c \ucc38\uace0\ud558\uc5ec \ub514\ucef4\ud30c\uc77c \uc5c6\uc774 \uc18c\uc2a4\ucf54\ub4dc\ub97c \uc9c1\uc811 \uc0b4\ud3b4\ubcfc \uc218\ub3c4 \uc788\ub2e4. cups \ubc84\uc804\uc744 \ube44\uad50\ud574\ubcf4\uba74, \ucde8\uc57d\uc810\uc774 \ud328\uce58\ub41c \ubc84\uc804\uc740 522.4\uc774\uba70,&hellip;&nbsp;<a href=\"https:\/\/h4ck.kr\/?p=4145\" rel=\"bookmark\">\ub354 \ubcf4\uae30 &raquo;<span class=\"screen-reader-text\">[1day] CVE-2026-28915: cupsd: \ubd80\uc801\uc808\ud55c \uacbd\ub85c \ucc98\ub9ac\uc5d0 \ub530\ub978 \ucde8\uc57d\uc810 (\uc775\uc2a4 \uac00\ub2a5\uc131 X)<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"neve_meta_sidebar":"","neve_meta_container":"","neve_meta_enable_content_width":"","neve_meta_content_width":0,"neve_meta_title_alignment":"","neve_meta_author_avatar":"","neve_post_elements_order":"","neve_meta_disable_header":"","neve_meta_disable_footer":"","neve_meta_disable_title":"","_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[72],"tags":[13,25],"class_list":["post-4145","post","type-post","status-publish","format-standard","hentry","category-realworld","tag-macos","tag-pwnable"],"jetpack_featured_media_url":"","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/h4ck.kr\/index.php?rest_route=\/wp\/v2\/posts\/4145","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/h4ck.kr\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/h4ck.kr\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/h4ck.kr\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/h4ck.kr\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=4145"}],"version-history":[{"count":1,"href":"https:\/\/h4ck.kr\/index.php?rest_route=\/wp\/v2\/posts\/4145\/revisions"}],"predecessor-version":[{"id":4158,"href":"https:\/\/h4ck.kr\/index.php?rest_route=\/wp\/v2\/posts\/4145\/revisions\/4158"}],"wp:attachment":[{"href":"https:\/\/h4ck.kr\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=4145"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/h4ck.kr\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=4145"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/h4ck.kr\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=4145"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}