CVE-2026-86898

none Published 9/14/2026 at 09:17 PM

A logic issue was addressed with improved state management. This issue is fixed in Safari 27, iOS 27 and iPadOS 27, macOS Golden Gate 27, vi…

A logic issue was addressed with improved state management. This issue is fixed in Safari 27, iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. Opening a maliciously crafted webarchive file may lead to universal cross-site scripting.

Why it matters

Internet-facing

Not identified as a common internet-facing category

Exploitation likelihood

unknown

▸ CVSS vector data not available for this CVE

Recommended mitigation

Apply the vendor patch as soon as it's available or already released.

This analysis is generated from structured CVSS vector data, CISA KEV cross-referencing, and vendor/product category rules — not a manual expert review. Treat it as a starting point, not a substitute for your own assessment.

CVSS Vector Breakdown

No CVSS vector data available for this CVE.

View official CVE record

Stay Updated

New CVEs and vulnerability advisories are added continuously as they're disclosed. Subscribe via RSS to get every update the moment it's published — no email or account required.

Subscribe via RSS

Latest CVEs Critical Watchlist Active Zero-Days

Share Share