CVE-2026-86898 | Apple iOS/iPadOS/macOS/Safari/visionOS up to 26 State Management cross site scripting

September 15, 2026 Yanac

A vulnerability was found in Apple iOS, iPadOS, macOS, Safari and visionOS up to 26 and classified as problematic. Affected by this vulnerability is an unknown functionality of the component State Management. Such manipulation leads to cross site scripting.

This vulnerability is referenced as CVE-2026-86898. It is possible to launch the attack remotely. No exploit is available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More