What is GHSA-54j8-mp7q-f5gc?

GHSA-54j8-mp7q-f5gc is a security advisory published by GitHub Security Advisories with Medium severity. A correctness issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.8...

Which CVE IDs does GHSA-54j8-mp7q-f5gc cover?

GHSA-54j8-mp7q-f5gc covers the following CVE IDs: CVE-2026-28836. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-54j8-mp7q-f5gc?

GHSA-54j8-mp7q-f5gc has a CVSS v3 base score of 6.1, published by GitHub Security Advisories.

GHSA-54j8-mp7q-f5gcMediumCVSS 6.1

A correctness issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.8...

Vendor

GitHub Security Advisories

Published

September 14, 2026

Last Modified

September 17, 2026

🔗 CVE IDs covered (1)

CVE-2026-28836 →

📋 Description

A correctness issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.8.8. An attacker with physical access may be able to silently persist an Apple Account on an erased device.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-28836
https://support.apple.com/en-us/128072
https://github.com/advisories/GHSA-54j8-mp7q-f5gc