Live › vulnerability › CVE-2026-86880
Go to dashboardApple fixed a flaw where an app could access sensitive user data because an entitlement check was missing. The fix ships in iOS 26.7.2, iPadOS 26.7.2, iOS 27 and iPadOS 27.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-26 21:55 UTC. All times on this page are UTC.
Any iPhone or iPad running an iOS or iPadOS build older than 26.7.2 (or older than 27) can be affected, since the sources describe an app reaching sensitive user data. The sources do not say which app conditions or data types are involved, so unknown whether managed or enterprise devices differ.
No product ranges from the sources yet.
sw_vers on a Mac-attached test device; the sources do not give a command for fleet checks26.7.2 or later, or to 27 or laterEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
This issue was addressed with additional entitlement checks. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27 and iPadOS 27. An app may be able to access sensitive user data.
This page as .md · .json · in your agent: get_signal("CVE-2026-86880")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.