MEDIUM

CVE-2026-86905

Apple Ipados 2026-09-14 CVSS v3.1

CVSS

5.5

Description

This issue was addressed by removing the vulnerable code. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. An app may be able to delete credentials stored in Keychain.

Weakness (CWE)

CWE-284 Improper Access Control

EPSS Score

0.1%

Probability of exploitation in next 30 days

0.9th percentile

References

https://support.apple.com/en-us/149034 Vendor Advisory https://support.apple.com/en-us/149035 Vendor Advisory https://support.apple.com/en-us/149038 Vendor Advisory

View on dbcve.org

Base CVE data derived from NVD (public domain). Enrichment by dbcve.org (CC-BY-4.0). Fetched via API.

Back to CVE