Live › vulnerability › CVE-2026-112681
Go to dashboardApple fixed a flaw in iOS and iPadOS where an app could fingerprint the user through missing entitlement checks. The sources do not describe the exact data exposed or the attack path beyond that.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-26 21:20 UTC. All times on this page are UTC.
Users and fleets running iOS or iPadOS builds older than the fixed versions. The sources do not say which apps or configurations are needed to exploit it, so no narrower group can be named.
No product ranges from the sources yet.
26.7.2 or later on the 26 line, or 27.2 or later on the 27 line.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
This issue was addressed with additional entitlement checks. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2. An app may be able to fingerprint the user.
This page as .md · .json · in your agent: get_signal("CVE-2026-112681")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.