CVE-2026-86881
Summary
| CVE | CVE-2026-86881 |
|---|---|
| State | PUBLISHED |
| Assigner | apple |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2026-09-14 21:17:39 UTC |
| Updated | 2026-09-14 21:17:39 UTC |
| Description | A certificate validation issue was addressed with improved certificate validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An attacker with a compromised intermediate certificate authority may be able to issue certificates with arbitrary extended key usages. |
Risk And Classification
Problem Types: An attacker with a compromised intermediate certificate authority may be able to issue certificates with arbitrary extended key usages
Vendor Declared Affected Products
| Source | Vendor | Product | Version | Platforms |
|---|---|---|---|---|
| CNA | Apple | IOS And IPadOS | affected 26.7 custom | Not specified |
| CNA | Apple | IOS And IPadOS | affected 27 custom | Not specified |
| CNA | Apple | MacOS | affected 15.8 custom | Not specified |
| CNA | Apple | MacOS | affected 26.7 custom | Not specified |
| CNA | Apple | MacOS | affected 27 custom | Not specified |
| CNA | Apple | TvOS | affected 27 custom | Not specified |
| CNA | Apple | VisionOS | affected 27 custom | Not specified |
| CNA | Apple | WatchOS | affected 27 custom | Not specified |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| support.apple.com/en-us/149035 | [email protected] | support.apple.com | |
| support.apple.com/en-us/149038 | [email protected] | support.apple.com | |
| support.apple.com/en-us/149037 | [email protected] | support.apple.com | |
| support.apple.com/en-us/149042 | [email protected] | support.apple.com | |
| support.apple.com/en-us/149043 | [email protected] | support.apple.com | |
| support.apple.com/en-us/149036 | [email protected] | support.apple.com | |
| support.apple.com/en-us/149034 | [email protected] | support.apple.com | |
| support.apple.com/en-us/149041 | [email protected] | support.apple.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.