Apple Emergency Patch for iOS 26, macOS26, macOS15 (CVE-2026-86950), (Mon, Sep 28th)
Apple today released patches for all of its operating systems. However, only patches for older branches include a security fix. The vulnerability being addressed in iOS 26, macOS 26 and macOS 15 is already being exploited. iOS and macOS 27 are not affected. Today&#;x26;#;39;s update for the current "27" branch does not address security issues, but fixes some functional issues that got caught after the release two weeks ago. A 27.1 version was also expected to support the new foldable iPhone and will likely include specific features geared to the soon to be available device.
Read at SANS Internet Storm Center
- Vendor
- Apple
- Product
- iOS / iPadOS, macOS
- EPSS
- 0.26 (p98)
- Exploitation
- observed in the wild
- Fix
- available
- Exposure class
- Mobile OS, Operating system
Why it ranks 63 (High)
- Exploitation observed in the wild
- EPSS 0.26 (elevated)
- Product class: mobile OS, operating system
- Widely deployed vendor product (Apple)
- Covered by 7 independent sources
- Fix available
- Threat research
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.
Links
- SANS Internet Storm Center (isc.sans.edu)
- CVE-2026-86950 on this site · NVD · CVE.org · Vulnpedia
Related coverage
Other items that share a CVE or were clustered with this one.