Authentication Issue in Apple Products
CVE-2026-28865

7.5HIGH

Key Information:

Vendor: Apple
Status: iOS And iPad OS; Mac OS; TV OS; Visionos
Vendor: CVE Published:; 25 March 2026

What is CVE-2026-28865?

An authentication issue in Apple products has been identified that could potentially allow an attacker in a privileged network position to intercept network traffic. This issue has been addressed with improved state management in various updates across iOS, iPadOS, macOS, tvOS, visionOS, and watchOS. Users are encouraged to update their devices to the latest versions to mitigate any potential risks.

Affected Version(s)

iOS and iPadOS 0 < 18.7.7

iOS and iPadOS 0 < 26.4

macOS 0 < 14.8.5

References

https://support.apple.com/en-us/126792

https://support.apple.com/en-us/126793

https://support.apple.com/en-us/126794

CVSS V3.1

Score:

7.5

Severity:

HIGH

Confidentiality:

None

Integrity:

None

Availability:

None

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

None

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Mar 25, 2026
Vulnerability Reserved
Mar 3, 2026

CVE-2026-28865 Data

JSON