Live › vulnerability › CVE-2026-112595
Go to dashboardApple's Thread network stack in iOS, iPadOS, macOS and tvOS 27.2 had an authentication flaw. An attacker physically close to a device can craft network traffic to gain access to a Thread network.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-26 21:20 UTC. All times on this page are UTC.
Devices running Apple OS releases earlier than 27.2 that participate in a Thread mesh network (smart home setups using Thread border routers or Thread-enabled accessories) are the ones exposed. The sources do not say which Thread role or configuration is required, so unknown whether devices without Thread in use are affected.
No product ranges from the sources yet.
sw_vers on macOS; unknown if the sources give a vulnerable range beyond 27.2.27.2 or later.27.2 or later.27.2 or later.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
This issue was addressed with improved authentication. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2. An attacker in physical proximity may be able to craft malicious network traffic to gain access to a Thread network.
This page as .md · .json · in your agent: get_signal("CVE-2026-112595")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.