Live › vulnerability › CVE-2026-84493
Go to dashboardAn authentication state-management flaw in iOS and iPadOS lets a malicious app access Bluetooth without the user's consent. The sources do not describe further impact beyond Bluetooth access.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-26 21:55 UTC. All times on this page are UTC.
Owners of iPhone and iPad devices running iOS or iPadOS releases older than the fixed versions named in the sources. Organisations managing Apple devices should update them; the sources do not say whether managed-device configuration changes exposure.
No product ranges from the sources yet.
26.7.2 or later on the 26.x line, or to 27.2 or later on the 27.x line.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
An authentication issue was addressed with improved state management. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2. A malicious app may be able to access Bluetooth without user consent.
This page as .md · .json · in your agent: get_signal("CVE-2026-84493")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.