CVE-2026-28856

published 2026-03-25

CVE-2026-28856: The issue was addressed with improved authentication. This issue is fixed in iOS 26.4 and iPadOS 26.4, visionOS 26.4, watchOS 26.4. An attacker with physical…

medium 4.6 CVSS 3.1

AV P AC L PR N UI N S U C H I N A N

The issue was addressed with improved authentication. This issue is fixed in iOS 26.4 and iPadOS 26.4, visionOS 26.4, watchOS 26.4. An attacker with physical access to a locked device may be able to view sensitive user information.

Affected

5 ranges

Vendor	Product	Version range	Fixed in
apple	ios_and_ipados	< 26.4	26.4
apple	ipados	< 26.4	26.4
apple	iphone_os	< 26.4	26.4
apple	visionos	< 26.4	26.4
apple	watchos	< 26.4	26.4

CWE-284