CVE-2026-28995
A logic issue was addressed with improved restrictions. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS
CVSS
8.8
High
EPSS
0.1%
p2
KEV
—
Exploit Today
1
0-100
Published: May 11, 2026 · Last modified: Aug 21, 2026 · CWE-269
0.1%EPSS · 30 days0.1%
2026-08-032026-08-31
A logic issue was addressed with improved restrictions. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. A malicious app may be able to break out of its sandbox.
- support.apple.comhttps://support.apple.com/en-us/126349
- support.apple.comhttps://support.apple.com/en-us/126350
- support.apple.comhttps://support.apple.com/en-us/127110
- support.apple.comhttps://support.apple.com/en-us/127111
- support.apple.comhttps://support.apple.com/en-us/127115
- support.apple.comhttps://support.apple.com/en-us/127118
- support.apple.comhttps://support.apple.com/en-us/127119
- support.apple.comhttps://support.apple.com/en-us/127120
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2026-797448.8 HIG—
———MCPHub is a unified hub for centrally managing and dynamically orchestrating multiple MCP servers/APIs into separate endpoints with flexible routing strategies. Prior to version 1.0.29, MCPHub's PUT /api/system-config endpoint (handler updateSystemConfig) performs no authorization check. It is protected only by the app-wide authentication middleware and a rate limiter — it never inspects req.user.isAdmin. This issue has been patched in version 1.0.29.19hCVE-2026-828078.8 HIG—
———A vulnerability was determined in ieungSoft Ultra RAMDisk Pro 1.82. This issue affects some unknown processing in the library URDSCSI.sys of the component Kernel Driver. This manipulation causes improper privilege management. The attack needs to be launched locally. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.21hCVE-2026-826713.4 LOW5.3%
——2A vulnerability has been found in IObit Unlocker 1.3.0.12. This vulnerability affects the function ZwTerminateProcess in the library IObitUnlocker.sys of the component IRP_MJ_DEVICE_CONTROL Handler. The manipulation leads to improper privilege management. An attack has to be approached locally. The vendor was contacted early about this disclosure but did not respond in any way.1dCVE-2026-826704.4 MED4.1%
——1A flaw has been found in IObit Uninstaller 15.5.0.11. This affects the function IRP_MJ_DEVICE_CONTROL in the library IUForceDelete.sys of the component IOCTL Handler. Executing a manipulation can lead to improper privilege management. The attack requires local access. The vendor was contacted early about this disclosure but did not respond in any way.22hCVE-2026-828609.8 CRI22.3%
——7@hulumi/policies versions before 1.3.2 fail to fully inspect inline and attached IAM policy evidence for the administrator-policy guardrail. Attackers can craft admin-equivalent policy paths that bypass policy evaluation controls.22hCVE-2026-828579.8 CRI20.5%
——6hulumi versions before v1.3.2 contain a privilege escalation vulnerability in the weekly integration IAM policy that allows role lifecycle operations on af-e2e-* roles without sufficient boundary restrictions. Attackers with the documented principal can create persistent higher-privilege roles in the sandbox account.1d