VDB
CVE-2026-86950
CVE-2026-86950
PUBLISHED
KEV
As of September 28, 2026, Apple is affected by a vulnerability in the following products: iOS and iPadOS Prior to 27.0.1 Prior to 26.7.1 macOS Golden Gate Prior to 27.0.1 macOS Tahoe Prior to 26.7.1 macOS Sequoia Prior to 15.8.1 watchOS Prior to 27.0.1 visionOS 27 Prior to 27.0.1 Apple has indicated that CVE-2026-86950 may have been exploited. On September 29, 2026, Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-86950 to their Known Exploited Vulnerabilities (KEV) Database. The Cyber Centre encourages users and administrators to review the provided web link and apply any necessary updates as they become available.
EPSS 1.24% · 68.1th percentile
Risk Scores
EPSS Score
1.24%
68.1th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Prior | Prior to 15.8.1 | |
| Prior | Prior to 26.7.1 | |
| Prior | Prior to 27.0.1 |
Timeline
- Jun 14, 2021 VulnCheck KEV Exploitation
- Dec 13, 2022 VulnCheck KEV Exploitation
- Jul 1, 2023 VulnCheck KEV Exploitation
- Apr 16, 2024 VulnCheck KEV Exploitation
- Sep 28, 2026 VulnCheck KEV Exploitation
- Sep 28, 2026 Coalition ESS Score
- Sep 28, 2026 CVE Published
- Sep 29, 2026 CISA KEV Added
- Sep 29, 2026 VulnCheck KEV Exploitation
- Sep 29, 2026 PoC Published
- Sep 29, 2026 EPSS Score
- Sep 30, 2026 EPSS Score