Skip to content
OpenAdvisories
Medium · 4.6 CVE-2026-28895 EUVD-2026-15177GHSA-rhq8-3jvq-fq3f

The issue was addressed with improved checks. This issue is fixed in iOS 26.4 and iPadOS 26.4. An attacker with physical access to an iOS d…

Published Mar 25, 2026 · Updated Apr 2, 2026 · Assigned by apple

Description

The issue was addressed with improved checks. This issue is fixed in iOS 26.4 and iPadOS 26.4. An attacker with physical access to an iOS device with Stolen Device Protection enabled may be able to access biometrics-gated Protected Apps with the passcode.

Affected products

VendorProductAffectedFixed
Apple iOS and iPadOS < 26.4 26.4

Advisories 2

References