This issue was addressed through improved state management. This issue is fixed in Safari 26.4, iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, macOS Tahoe 26.4, tvOS 26.4, visionOS 26.4, watchOS 26.4. Processing maliciously crafted web content may prevent Content Security Policy from being enforced.

The version of Apple iOS running on the mobile device is prior to 26.4. It is, therefore, affected by multiple vulnerabilities.

The remote host is running a version of macOS / Mac OS X that is 26.x prior to 26.4. It is, therefore, affected by multiple vulnerabilities:

  - Apache HTTP Server 2.4.65 and earlier with Server Side Includes (SSI) enabled and mod_cgid (but not     mod_cgi) passes the shell-escaped query string to #exec cmd=... directives. This issue affects Apache     HTTP Server before 2.4.66. Users are recommended to upgrade to version 2.4.66, which fixes the issue.
    (CVE-2025-58098)

  - When an OAuth2 bearer token is used for an HTTP(S) transfer, and that transfer performs a cross-protocol     redirect to a second URL that uses an IMAP, LDAP, POP3 or SMTP scheme, curl might wrongly pass on the     bearer token to the new target host. (CVE-2025-14524)

  - An integer overflow in the case of failed ACME certificate renewal leads, after a number of failures (~30     days in default configurations), to the backoff timer becoming 0. Attempts to renew the certificate then     are repeated without delays until it succeeds. This issue affects Apache HTTP Server: from 2.4.30 before     2.4.66. Users are recommended to upgrade to version 2.4.66, which fixes the issue. (CVE-2025-55753)

  - Server-Side Request Forgery (SSRF) vulnerability in Apache HTTP Server on Windows with AllowEncodedSlashes     On and MergeSlashes Off allows to potentially leak NTLM hashes to a malicious server via SSRF and     malicious requests or content Users are recommended to upgrade to version 2.4.66, which fixes the issue.
    (CVE-2025-59775)

  - LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable     Network Graphics) raster image files. Prior to version 1.6.51, a heap buffer over-read vulnerability     exists in libpng's png_do_quantize function when processing PNG files with malformed palette indices. The     vulnerability occurs when palette_lookup array bounds are not validated against externally-supplied image     data, allowing an attacker to craft a PNG file with out-of-range palette indices that trigger out-of-     bounds memory access. This issue has been patched in version 1.6.51. (CVE-2025-64505)

Note that Nessus has not tested for these issues but has instead relied only on the operating system's self-reported version number.

The version of Apple iOS running on the mobile device is prior to 18.7.7. It is, therefore, affected by multiple vulnerabilities.

ID	Name	Product	Family	Severity
303482	Apple iOS < 26.4 Multiple Vulnerabilities (126792)	Nessus	Mobile Devices	medium
303481	macOS 26.x < 26.4 Multiple Vulnerabilities (126794)	Nessus	MacOS X Local Security Checks	high
303480	Apple iOS < 18.7.7 Multiple Vulnerabilities (126793)	Nessus	Mobile Devices	high

Detections

Analytics

CVE-2026-20665

medium

Tenable Plugins

medium

high

high