Live › vulnerability › CVE-2026-86987
Go to dashboardAn authorization check in iOS and iPadOS was missing or too weak, so a request could reach data it should not. A remote attacker may be able to read sensitive user data on an affected device.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-26 21:55 UTC. All times on this page are UTC.
Owners of iPhone and iPad devices running iOS or iPadOS builds before 27.2. Managed fleets should confirm devices have moved to 27.2. The sources do not say which features or data paths are involved, so the exposure scope beyond the version is unknown.
No product ranges from the sources yet.
27.2.27.2 or later.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
An authorization issue was addressed with improved entitlement checks. This issue is fixed in iOS 27.2 and iPadOS 27.2. A remote attacker may be able to access sensitive user data.
This page as .md · .json · in your agent: get_signal("CVE-2026-86987")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.