Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2026-28906

27
FAUCET Score

This issue was addressed through improved state management. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5, visionOS 26.5. An attacker may be able to track users through their IP address.

First published: May 11, 2026Last modified: May 11, 2026

Impacted Technologies

VendorProductVersion(s)CPE
< 18.7.9CPE matchmatch criteria
cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*
>= 26.0, < 26.5CPE matchmatch criteria
cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*
< 18.7.9CPE matchmatch criteria
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
>= 26.0, < 26.5CPE matchmatch criteria
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
>= 14.0, < 14.8.7CPE matchmatch criteria
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 3.1

7.5HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
Exploitability Score
3.9
Impact Score
3.6
CvssVersion
3.1

Exploit Intelligence

EPSS Score
0.43%
Probability of exploitation in next 30 days
EPSS Percentile
35.2%
Percentile rank of EPSS score among Peer Group
As of 2026-07-27
Model: v2026.06.15
This CVE's current EPSS score of 0.0043 is in the 14th percentile among its peer group of 51,551 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.

Media Mentions

The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Vendor Patches (1)

applevendor investigatingvia apple_support
View patch

Vendor Advisories (6)

appleapple:127110LOW

About the security content of iOS 26.5 and iPadOS 26.5 - Apple Support

appleapple:127111LOW

About the security content of iOS 18.7.9 and iPadOS 18.7.9 - Apple Support

appleapple:127115LOW

About the security content of macOS Tahoe 26.5 - Apple Support

appleapple:127116LOW

About the security content of macOS Sequoia 15.7.7 - Apple Support

appleapple:127117LOW

About the security content of macOS Sonoma 14.8.7 - Apple Support

appleapple:127120LOW

About the security content of visionOS 26.5 - Apple Support

References

support.apple.com / en-us/127110
Release NotesVendor Advisory
support.apple.com / en-us/127111
Release NotesVendor Advisory
support.apple.com / en-us/127115
Release NotesVendor Advisory
support.apple.com / en-us/127116
Release NotesVendor Advisory
support.apple.com / en-us/127117
Release NotesVendor Advisory
support.apple.com / en-us/127120
Release NotesVendor Advisory