CVE-2026-28882
Apple Ipados ≤ 26.4
CVSS Score v3.1
4.0
Click a component to see what it means
Raw vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
EPSS Score
0.0019
9th percentile
CVSS and EPSS are reproduced from their sources (NVD, FIRST EPSS). Risk Priority is our own derived reading, not an NVD score.
Summary
CVE-2026-28882 is a medium-severity an unspecified weakness vulnerability in Apple Ipados. Its CVSS base score is 4.0 (Medium).
Operationally, ranked at the 9th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2026-15164
Vulnerability Data
This issue was addressed with improved checks. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.4 and iPadOS 26.4, macOS Tahoe 26.4, tvOS 26.4, visionOS 26.4, watchOS 26.4. An app may be able to enumerate a user's…
more
installed apps.
- CWE(s)
Related Threats
CVEs Like This One
CVE-2026-20650Same product: Apple Ipados
CVE-2025-43361Same product: Apple Ipados
CVE-2025-24184Same product: Apple Ipados
CVE-2026-28942Same product: Apple Ipados
CVE-2026-20654Same product: Apple Ipados
CVE-2024-27815Same product: Apple Ipados
CVE-2024-27801Same product: Apple Ipados
CVE-2026-28904Same product: Apple Ipados
CVE-2025-43448Same product: Apple Ipados
CVE-2026-28990Same product: Apple Ipados
Affected Assets
apple
ipados
≤ 26.4
apple
iphone os
≤ 26.4
apple
macos
≤ 26.4
apple
tvos
≤ 26.4
apple
visionos
≤ 26.4
apple
watchos
≤ 26.4
Mitigating Controls
No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.