---
id: "CVE-2026-112595"
kind: "vulnerability"
aliases: ["CVE-2026-112595"]
title: "Apple: improved authentication fixes Thread network access by nearby attacker"
severity: "unknown"
cvss: null
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: []
ecosystems: []
tags: ["apple", "infrastructure", "ios", "macos", "smart-home", "thread"]
not_affected_if: ["no-thread-network"]
published_at: "2026-10-26T21:17:52+00:00"
first_seen_at: "2026-10-26T21:20:28+00:00"
updated_at: "2026-10-26T21:27:36+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-112595", "first_seen_at": "2026-10-26T21:20:28+00:00"}]
---

# Apple: improved authentication fixes Thread network access by nearby attacker

Apple's Thread network stack in iOS, iPadOS, macOS and tvOS 27.2 had an authentication flaw. An attacker physically close to a device can craft network traffic to gain access to a Thread network.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check the OS version on each Apple device (iOS, iPadOS, macOS, tvOS) in Settings > General > About or `sw_vers` on macOS; unknown if the sources give a vulnerable range beyond 27.2.

## Fix

- Update iOS and iPadOS to `27.2` or later.
- Update macOS Golden Gate to `27.2` or later.
- Update tvOS to `27.2` or later.

## Timeline

- 2026-10-26T21:20:28+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-112595

## From the sources

This issue was addressed with improved authentication. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2. An attacker in physical proximity may be able to craft malicious network traffic to gain access to a Thread network.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_