Product:
iOS, iPadOS, macOS, tvOS, visionOS, watchOS
Summary
An authentication issue was addressed with improved state management. An attacker in a privileged network position may be able to intercept network traffic. This issue has been fixed in several versions of Apple’s operating systems.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 7.5 | CVE-2026-28865 |
Exploitation
To exploit this vulnerability, an attacker must be in a privileged network position, allowing them to intercept network traffic. This could involve techniques such as man-in-the-middle attacks, where the attacker can capture and potentially manipulate data being transmitted between devices.
Affected Products
- iOS 18.7.7 and earlier
- iPadOS 18.7.7 and earlier
- macOS Sequoia 15.7.5 and earlier
- macOS Sonoma 14.8.5 and earlier
- macOS Tahoe 26.4 and earlier
- tvOS 26.4 and earlier
- visionOS 26.4 and earlier
- watchOS 26.4 and earlier
Mitigation
To mitigate this issue, users should update their devices to the latest versions of the affected operating systems. Regularly applying security updates is crucial to protect against potential vulnerabilities.