MEDIUM

CVE-2026-84600

Apple Ipados 2026-09-14 CVSS v3.1

CVSS

5.4

Description

An authorization issue was addressed with improved state management. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. A malicious shortcut may be able to send messages without user confirmation.

Weakness (CWE)

CWE-285 Improper Authorization

EPSS Score

0.22%

Probability of exploitation in next 30 days

12.2th percentile

References

https://support.apple.com/en-us/149034 Vendor Advisory https://support.apple.com/en-us/149035 Vendor Advisory https://support.apple.com/en-us/149036 Vendor Advisory https://support.apple.com/en-us/149037 Vendor Advisory https://support.apple.com/en-us/149038 Vendor Advisory

View on dbcve.org

Base CVE data derived from NVD (public domain). Enrichment by dbcve.org (CC-BY-4.0). Fetched via API.

Back to CVE