{"id":"CVE-2026-112595","kind":"vulnerability","aliases":["CVE-2026-112595"],"related":[],"title":"Apple: improved authentication fixes Thread network access by nearby attacker","description":"This issue was addressed with improved authentication. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2. An attacker in physical proximity may be able to craft malicious network traffic to gain access to a Thread network.","summary":"Apple's Thread network stack in iOS, iPadOS, macOS and tvOS 27.2 had an authentication flaw. An attacker physically close to a device can craft network traffic to gain access to a Thread network.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["apple","infrastructure","ios","macos","smart-home","thread"],"not_affected_if":["no-thread-network"],"how_to_check":"- Check the OS version on each Apple device (iOS, iPadOS, macOS, tvOS) in Settings > General > About or `sw_vers` on macOS; unknown if the sources give a vulnerable range beyond 27.2.","fix":"- Update iOS and iPadOS to `27.2` or later.\n- Update macOS Golden Gate to `27.2` or later.\n- Update tvOS to `27.2` or later.","status":"open","published_at":"2026-10-26T21:17:52+00:00","first_seen_at":"2026-10-26T21:20:28+00:00","triaged_at":"2026-10-26T21:27:36+00:00","updated_at":"2026-10-26T21:27:36+00:00","category":"infrastructure","confidence":0.4,"triage":{"at":"2026-10-26T21:27:36Z","model":"claude-haiku-5-5","output":{"fix":"- Update iOS and iPadOS to `27.2` or later.\n- Update macOS Golden Gate to `27.2` or later.\n- Update tvOS to `27.2` or later.","reach":"network","title":"Apple: improved authentication fixes Thread network access by nearby attacker","impact":"medium","summary":"Apple's Thread network stack in iOS, iPadOS, macOS and tvOS 27.2 had an authentication flaw. An attacker physically close to a device can craft network traffic to gain access to a Thread network.","category":"infrastructure","nicknames":[],"who_cares":["apple","thread","smart-home","ios","macos"],"confidence":0.4,"needs_auth":"unknown","worst_case":"attacker gains access to a nearby Thread network","analyst_note":"Find Apple's security content page for the 27.2 release to confirm the exact affected Thread functionality and CVSS score; the NVD entry carries no severity.","how_to_check":"- Check the OS version on each Apple device (iOS, iPadOS, macOS, tvOS) in Settings > General > About or `sw_vers` on macOS; unknown if the sources give a vulnerable range beyond 27.2.","needs_analyst":true,"not_affected_if":["no-thread-network"],"who_is_affected":"Devices running Apple OS releases earlier than 27.2 that participate in a Thread mesh network (smart home setups using Thread border routers or Thread-enabled accessories) are the ones exposed. The sources do not say which Thread role or configuration is required, so unknown whether devices without Thread in use are affected.","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"low"},"cost_usd":0.000623,"input_tokens":3283,"output_tokens":589,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-112595':13A,16A '-2026':12A,15A '27.2':36B,72C,75C,79C,81C 'abl':89C 'access':7A,54B,97C 'address':62C 'appl':1A,17B,25B 'attack':10A,42B,83C 'authent':3A,39B,65C 'close':44B 'craft':49B,91C 'cve':11A,14A 'devic':47B 'fix':4A,69C 'flaw':40B 'gain':53B,96C 'gate':78C 'golden':77C 'home':23B 'improv':2A,64C 'infrastructur':18B 'io':19B,31B,71C 'ipado':32B,74C 'issu':60C,67C 'maco':20B,33B,76C 'malici':92C 'may':87C 'nearbi':9A 'network':6A,28B,50B,58B,93C,101C 'physic':43B,85C 'proxim':86C 'smart':22B 'smart-hom':21B 'stack':29B 'thread':5A,24B,27B,57B,100C 'traffic':51B,94C 'tvos':35B,80C","nicknames":[],"mitigations":[],"who_affected":"Devices running Apple OS releases earlier than 27.2 that participate in a Thread mesh network (smart home setups using Thread border routers or Thread-enabled accessories) are the ones exposed. The sources do not say which Thread role or configuration is required, so unknown whether devices without Thread in use are affected.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-26T21:17:52+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-112595","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-112595","severity":null,"published_at":"2026-10-26T21:17:52+00:00","modified_at":"2026-10-26T21:17:52+00:00","first_seen_at":"2026-10-26T21:20:28+00:00","fetched_at":"2026-10-26T21:20:28+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}