Live › vulnerability › CVE-2026-86955
Go to dashboardAn authorization check in iOS 27 and iPadOS 27 was missing or weak, so an app can reach sensitive user data it should not see. The sources do not name the affected component or data type.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Owners and administrators of iPhones and iPads running iOS 27 or iPadOS 27 before the fix. Devices on earlier major versions are not named in the sources. Managed fleets should confirm the update reached each device. The sources do not say which apps or data types are involved.
No product ranges from the sources yet.
iOS 27 or iPadOS 27 before the fixed build means exposedEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
An authorization issue was addressed with improved state management. This issue is fixed in iOS 27 and iPadOS 27. An app may be able to access sensitive user data.
This page as .md · .json · in your agent: get_signal("CVE-2026-86955")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.