Live › vulnerability › CVE-2026-86977
Go to dashboardAn authorization issue in Apple iOS and iPadOS let an app initiate calls or send messages without the needed permission. The fix is in iOS 27 and iPadOS 27, and the sources give no further detail on the exploit path.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
No product ranges from the sources yet.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
An authorization issue was addressed with improved network restrictions. This issue is fixed in iOS 27 and iPadOS 27. An app may be able to initiate calls or send messages.
This page as .md · .json · in your agent: get_signal("CVE-2026-86977")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.