CVE-2026-28856 — Vulnetix

CVE-2026-28856 PUBLISHED CVSS 4.599999904632568 MEDIUM

The issue was addressed with improved authentication. This issue is fixed in iOS 26.4 and iPadOS 26.4, visionOS 26.4, watchOS 26.4. An attacker with physical access to a locked device may be able to view sensitive user information.

EPSS 0.04% · 13.7th percentile

Risk Scores

CVSS 3.1

4.599999904632568

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS Score

0.04%

13.7th percentile

Affected Products

Vendor	Product	Versions
apple	watchos	0
Apple	visionOS	0
apple	ipados	0
Apple	iOS and iPadOS	0
apple	iphone_os	0
Apple	watchOS	0
apple	visionos	0

Exploit Intelligence

CIRCL seen: CVE-2026-28856 (circl-sighting)
https://support.apple.com/en-us/126792 (circl)
https://support.apple.com/en-us/126798 (circl)
https://support.apple.com/en-us/126799 (circl)
ios_v1_generated.go (github-poc)
ios_v1_generated.go (github-poc)
ios_v2_generated.go (github-poc)
ios_v2_generated.go (github-poc)
ios_v1_generated.go (github-poc)
ios_v1_generated.go (github-poc)

…and 10 more exploits

Timeline

Mar 25, 2026 CVE Published
Mar 25, 2026 EPSS Score
Mar 25, 2026 Coalition ESS Score
Mar 25, 2026 PoC Published
Mar 29, 2026 Security Advisory
May 18, 2026 EPSS Score
May 19, 2026 EPSS Score
May 20, 2026 EPSS Score
May 21, 2026 EPSS Score
May 22, 2026 EPSS Score
May 23, 2026 EPSS Score
May 24, 2026 EPSS Score

References

https://support.apple.com/en-us/126793 advisory
https://support.apple.com/en-us/126794 advisory
https://support.apple.com/en-us/126798 advisory
https://support.apple.com/en-us/126800 advisory
https://support.apple.com/en-us/126796 advisory
https://support.apple.com/en-us/126792 advisory
https://support.apple.com/en-us/126795 advisory
https://support.apple.com/en-us/126799 advisory
https://support.apple.com/en-us/126797 advisory
https://support.apple.com/en-us/126801 advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-28856 advisory

Open in Interactive Console →