CVE-2026-28871Disclosure(apple / ipados)

LOWCVSS 4.3 · MEDIUM

Exploit discussion active in current signal (1 latest mentions)

Immediate actions

Patch apple ipados systems immediately
Hunt for exploitation attempts and persistence artifacts
Increase monitoring for publicly documented tradecraft

Recommended action window: High priority (within 72h)

NVD description

A logic issue was addressed with improved checks. This issue is fixed in Safari 26.4, iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, macOS Tahoe 26.4. Visiting a maliciously crafted website may lead to a cross-site scripting attack.

apple CVEs Back to dashboard

2.5/ 10 priority

Sources & remediation

Vendor / third-party advisories

Weakness type (CWE)

CWE-79

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

ipados
iphone_os
macos
safari

Threat summary

Public PoC is present in monitored signal
Patch or workaround signal is available
4 mentions across 4 observed days
Momentum state: stable

What's happening

PoC mentioned or linked in 1 signal
Patch or workaround mentioned in 1 signal
Technical details provided in 2 signals
Disclosure: 3 classified signals
General: 1 classified signal
Peaked 3d ago at 1 mentions (2026-03-25); latest day: 1
4 total mentions across 4 days

Affected systems

Vendors

apple

Products

ipadosiphone_osmacossafari

Deep dive

Activity timeline4 mentions / 4d

Signal classification2 categories

Disclosure

375.0%

General

125.0%

Referenced assets7 URLs

By indicator

Classification over time

Date	Total	Labels

2026-03-25	1	Disclosure1
2026-04-04	1	General1
2026-04-07	1	Disclosure1
2026-04-20	1	Disclosure1

Full discourse4 posts

hamayanhamayan@hamayanhamayan184d
Disclosure
最近、初めてCVEを取った。CVE-2026-3429(Keycloak), CVE-2026-28871(WebKit) https://t.co/6tDBLAt1Qa
Post summary
The tweet announces that the author has newly identified CVE-2026-3429 (Keycloak) and CVE-2026-28871 (WebKit), but does not provide additional technical, exploit, or remediation details.
44012477.9K
1.9K followersView on X
GMO Flatt Security株式会社@flatt_security171d
Disclosure
弊社エンジニアの報告した脆弱性が4件公開されました。アドバイザリを参照し最新版へのアップデート等の対策を行ってください。セキュリティエンジニア @koketiki 報告 ① CVE-2026-39410（HonoにおけるCookie Prefix保護のバイパス） https://flatt.tech/cve/CVE-2026-39410 セキュリティエンジニア @k1rnt 報告 ② CVE-2026-33810（Goのcrypto/x509におけるDNS名制約検証の大文字・小文字不一致によるバイパス） https://flatt.tech/cve/CVE-2026-33810 コーポレートエンジニア @hamayanhamayan 報告 ③ CVE-2026-3429（Keycloakにおけるアクセス制御不備） https://flatt.tech/cve/CVE-2026-3429 ④ CVE-2026-28871（WebKitにおけるXSSに繋がりうるロジックの脆弱性） https://flatt.tech/cve/CVE-2026-28871
Post summary
Four CVEs have been disclosed by the company, with links to advisories and a recommendation to apply updates for mitigation.
08436810.8K
5.6K followersView on X
CVEarity@CVEarity187d
General
⚡ New CVE Alert: CVE-2026-28871 🚨 Risk Level: Unknown 🧩 Affects: Multiple / Unspecified Products Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-28871 #CVE-2026-28871 #CVE #CyberSecurity #InfoSec https://t.co/fGUNbz0MpO
Post summary
A newly identified CVE-2026-28871 is mentioned with an unknown risk level and unspecified affected products, but no further technical, exploit, or patch details are provided.
0000040
123 followersView on X
Vulmon Vulnerability Feed@VulmonFeeds197d
Disclosure
CVE-2026-28871 Cross-Site Scripting Vulnerability in Apple Safari and iOS Platfo... https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-28871 Vulnerability Alert Subscriptions: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=1
Post summary
A new XSS vulnerability (CVE-2026-28871) affecting Apple Safari and iOS has been disclosed, with a link to details but no PoC, exploit, or patch information provided.
0000039
4.0K followersView on X

CPE platform detail4 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

4 of 4 entries

Part	Vendor	Product	Version	Target SW	Target HW
OS	apple	ipados	-	-	-
OS	apple	iphone_os	-	-	-
OS	apple	macos	-	-	-
App	apple	safari	-	-	-

Explore more

Back to dashboard apple CVEs ipados vulnerabilities

What researchers are saying

CVE-2026-28871

hamayanhamayan[verified]@hamayanhamayanDisclosure

The tweet announces that the author has newly identified CVE-2026-3429 (Keycloak) and CVE-2026-28871 (WebKit), but does not provide additional technical, exploit, or remediation details.

GMO Flatt Security株式会社[verified]@flatt_securityDisclosure

Four CVEs have been disclosed by the company, with links to advisories and a recommendation to apply updates for mitigation.

CVEarity@CVEarityGeneral

A newly identified CVE-2026-28871 is mentioned with an unknown risk level and unspecified affected products, but no further technical, exploit, or patch details are provided.

Vulmon Vulnerability Feed@VulmonFeedsDisclosure

A new XSS vulnerability (CVE-2026-28871) affecting Apple Safari and iOS has been disclosed, with a link to details but no PoC, exploit, or patch information provided.