Monitor vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
Apple Devices: Authentication Traffic Can Be Intercepted by Network Attackers
CVE-2026-28865
Summary
A security issue in Apple devices could allow an attacker on the same network to intercept sensitive information, such as login credentials. This issue has been fixed in several versions of Apple's operating systems. Update your devices to the latest available version to protect against this risk.
Original title
An authentication issue was addressed with improved state management. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS...
Original description
An authentication issue was addressed with improved state management. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4, tvOS 26.4, visionOS 26.4, watchOS 26.4. An attacker in a privileged network position may be able to intercept network traffic.
- https://support.apple.com/en-us/126792
- https://support.apple.com/en-us/126793
- https://support.apple.com/en-us/126794
- https://support.apple.com/en-us/126795
- https://support.apple.com/en-us/126796
- https://support.apple.com/en-us/126797
- https://support.apple.com/en-us/126798
- https://support.apple.com/en-us/126799
Published: 25 Mar 2026 · Updated: 25 Mar 2026 · First seen: 25 Mar 2026