PT-2026-39766 · Apple · Ipados+1

Guy Dor · Published 2026-05-11 · Updated 2026-05-14 · CVE-2026-28873

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions iOS versions prior to 18.7.9 iOS versions prior to 26.4 iPadOS versions prior to 18.7.9 iPadOS versions prior to 26.4

Description An application may be able to circumvent App Privacy Report logging. This issue is addressed by implementing additional entitlement checks.

Recommendations Update iOS to version 18.7.9 or 26.4. Update iPadOS to version 18.7.9 or 26.4.

Fix

Incorrect Authorization

Weakness Enumeration

CWE-863

Related Identifiers

CVE-2026-28873

Affected Products

Ios

Ipados

References · 4

• https://support.apple.com/en-us/127111 · Vendor Advisory
• https://support.apple.com/en-us/126792 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-28873 · Security Note
• https://t.me/cveNotify/163450 · Telegram Post