CVE-2026-86905

MediumCVSS 5.5

Published: 14/09/2026(UTC)Updated: 16/09/2026(UTC)Translated: 15/09/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.10%

1th percentile - higher than 1% of all known CVEs

Summary

This issue was addressed by removing the vulnerable code. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. An app may be able to delete credentials stored in Keychain.

Risk Assessment

Loss of Keychain credentials can prevent access to accounts and services and lead to security problems. The risk affects devices running unpatched Apple OS versions.

Recommendation

Update iOS, iPadOS, macOS, or visionOS to the patched version. Consider backing up credentials and monitoring for unusual Keychain changes.

Other vulnerabilities in Keychain

CVE-2026-28860High
The issue was addressed with improved input validation. Local attacks may lead to modification of the Keychain state.

Original NVD description (English source)

This issue was addressed by removing the vulnerable code. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. An app may be able to delete credentials stored in Keychain.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS