CVE-2026-28931 is a buffer overflow vulnerability in Apple iOS and iPadOS that occurs when connecting to a malicious NFS server. The flaw allows kernel memory corruption due to insufficient bounds checking. Apple fixed this issue in iOS 26.6 and iPadOS 26.6 by improving bounds checking to prevent the overflow. The vulnerability has a CVSS 3.1 base score of 8.8, indicating high impact on confidentiality, integrity, and availability. No known exploits are reported in the wild at this time.

Successful exploitation of this vulnerability may lead to kernel memory corruption, which can result in arbitrary code execution with kernel privileges, system instability, or denial of service. The vulnerability affects confidentiality, integrity, and availability of the affected devices.

A fix is available in iOS 26.6 and iPadOS 26.6. Users and administrators should update affected devices to these versions or later to remediate the vulnerability. There is no indication of alternative mitigations or temporary workarounds. Since this is not a cloud service, patching the device OS is required.