Live › vulnerability › CVE-2026-112701
Go to dashboardAn authorization check in Apple's iOS and iPadOS was fixed with improved state management. A malicious or compromised app may be able to access sensitive user data it should not reach.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-26 21:20 UTC. All times on this page are UTC.
Any iPhone or iPad running an iOS or iPadOS build older than the fixed releases can be affected, as the sources list the fix only for those versions. The sources do not say which data types or app permissions are involved, so who can skip it is unknown. Managed devices should be checked through MDM inventory.
No product ranges from the sources yet.
unknown if the sources do not give a command for managed fleets26.7.2 on the 26 branch or 27.2 on the 27 branchEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
An authorization issue was addressed with improved state management. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2. An app may be able to access sensitive user data.
This page as .md · .json · in your agent: get_signal("CVE-2026-112701")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.