{"id":"CVE-2026-86955","kind":"vulnerability","aliases":["CVE-2026-86955"],"related":[],"title":"Apple iOS and iPadOS: authorization flaw lets an app read sensitive user data","description":"An authorization issue was addressed with improved state management. This issue is fixed in iOS 27 and iPadOS 27. An app may be able to access sensitive user data.","summary":"An authorization check in iOS 27 and iPadOS 27 was missing or weak, so an app can reach sensitive user data it should not see. The sources do not name the affected component or data type.","severity":"medium","cvss":5.5,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["apple","infrastructure","ios","ipados","mobile-fleet"],"not_affected_if":["already-updated-device"],"how_to_check":"- Check the device version in Settings > General > About; `iOS 27` or `iPadOS 27` before the fixed build means exposed\n- unknown for any command-line check","fix":"- Update iOS and iPadOS to the fixed release of 27 (exact build number unknown)","status":"open","published_at":"2026-10-20T01:17:28+00:00","first_seen_at":"2026-10-23T21:57:19+00:00","triaged_at":"2026-10-25T04:12:35+00:00","updated_at":"2026-10-25T04:12:35+00:00","category":"infrastructure","confidence":0.5,"triage":{"at":"2026-10-25T04:12:35Z","model":"claude-haiku-5-5","output":{"fix":"- Update iOS and iPadOS to the fixed release of 27 (exact build number unknown)","reach":"local","title":"Apple iOS and iPadOS: authorization flaw lets an app read sensitive user data","impact":"medium","summary":"An authorization check in iOS 27 and iPadOS 27 was missing or weak, so an app can reach sensitive user data it should not see. The sources do not name the affected component or data type.","category":"infrastructure","nicknames":[],"who_cares":["ios","ipados","apple","mobile-fleet"],"confidence":0.5,"needs_auth":"unknown","worst_case":"A malicious installed app reads sensitive user data","analyst_note":"Check Apple's security release notes for iOS 27 and the affected component and fixed build; the sources give only the one-line description.","how_to_check":"- Check the device version in Settings > General > About; `iOS 27` or `iPadOS 27` before the fixed build means exposed\n- unknown for any command-line check","needs_analyst":true,"not_affected_if":["already-updated-device"],"who_is_affected":"Owners and administrators of iPhones and iPads running iOS 27 or iPadOS 27 before the fix. Devices on earlier major versions are not named in the sources. Managed fleets should confirm the update reached each device. The sources do not say which apps or data types are involved.","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000578,"input_tokens":3248,"output_tokens":506,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-2026':15A,18A '-86955':16A,19A '27':32B,35B,78C,81C 'abl':86C 'access':88C 'address':67C 'affect':58B 'app':9A,42B,83C 'appl':1A,20B 'author':5A,28B,64C 'check':29B 'compon':59B 'cve':14A,17A 'data':13A,47B,61B,91C 'fix':75C 'flaw':6A 'fleet':26B 'improv':69C 'infrastructur':21B 'io':2A,22B,31B,77C 'ipado':4A,23B,34B,80C 'issu':65C,73C 'let':7A 'manag':71C 'may':84C 'miss':37B 'mobil':25B 'mobile-fleet':24B 'name':56B 'reach':44B 'read':10A 'see':51B 'sensit':11A,45B,89C 'sourc':53B 'state':70C 'type':62B 'user':12A,46B,90C 'weak':39B","nicknames":[],"mitigations":[],"who_affected":"Owners and administrators of iPhones and iPads running iOS 27 or iPadOS 27 before the fix. Devices on earlier major versions are not named in the sources. Managed fleets should confirm the update reached each device. The sources do not say which apps or data types are involved.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-20T01:17:28+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss_by":"134c704f-9b21-4f2e-91b3-4a467353bcc0","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-86955","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-86955","severity":null,"published_at":"2026-10-20T01:17:28+00:00","modified_at":"2026-10-20T15:03:59+00:00","first_seen_at":"2026-10-23T21:57:19+00:00","fetched_at":"2026-10-23T22:28:57+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}