CVE-2026-86889

Published: Sep 14, 2026Modified: Sep 16, 2026

4.8

Vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N

Exploitability: 2.2 / Impact: 2.5

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

A certificate validation issue was addressed with improved certificate validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An attacker in a privileged network position may be able to intercept network traffic.

Affected (2)

Products: Apple: Macos

1 product

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Apple Macos	15.0 ≤ version < 15.8
Apple Macos	26.0 ≤ version < 26.7

Related CWEs

Improper Certificate Validation

The product does not validate, or incorrectly validates, a certificate.

References (3)

https://support.apple.com/en-us/149035

Source: product-security@apple.com

Vendor Advisory

https://support.apple.com/en-us/149042

Source: product-security@apple.com

Vendor Advisory

https://support.apple.com/en-us/149043

Source: product-security@apple.com

Vendor Advisory

Timeline

No history available yet.