{"id":"CVE-2026-86987","kind":"vulnerability","aliases":["CVE-2026-86987"],"related":[],"title":"Apple iOS and iPadOS: authorization flaw exposes sensitive user data remotely","description":"An authorization issue was addressed with improved entitlement checks. This issue is fixed in iOS 27.2 and iPadOS 27.2. A remote attacker may be able to access sensitive user data.","summary":"An authorization check in iOS and iPadOS was missing or too weak, so a request could reach data it should not. A remote attacker may be able to read sensitive user data on an affected device.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["apple-devices","infrastructure","ios","ipados","mobile-fleet"],"not_affected_if":["already-on-27.2-or-later"],"how_to_check":"- Check the iOS or iPadOS version under Settings > General > About; affected builds are earlier than `27.2`.\n- unknown","fix":"- Update iOS and iPadOS to `27.2` or later.","status":"open","published_at":"2026-10-26T21:20:37+00:00","first_seen_at":"2026-10-26T21:55:22+00:00","triaged_at":"2026-10-26T21:56:29+00:00","updated_at":"2026-10-26T21:56:29+00:00","category":"infrastructure","confidence":0.5,"triage":{"at":"2026-10-26T21:56:29Z","model":"claude-haiku-5-5","output":{"fix":"- Update iOS and iPadOS to `27.2` or later.","reach":"internet","title":"Apple iOS and iPadOS: authorization flaw exposes sensitive user data remotely","impact":"medium","summary":"An authorization check in iOS and iPadOS was missing or too weak, so a request could reach data it should not. A remote attacker may be able to read sensitive user data on an affected device.","category":"infrastructure","nicknames":[],"who_cares":["ios","ipados","apple-devices","mobile-fleet"],"confidence":0.5,"needs_auth":"unknown","worst_case":"Remote attacker reads sensitive user data on the device","analyst_note":"Check Apple's security release notes for iOS 27.2 to learn which component and data path is affected and whether user interaction is needed.","how_to_check":"- Check the iOS or iPadOS version under Settings > General > About; affected builds are earlier than `27.2`.\n- unknown","needs_analyst":true,"not_affected_if":["already-on-27.2-or-later"],"who_is_affected":"Owners of iPhone and iPad devices running iOS or iPadOS builds before 27.2. Managed fleets should confirm devices have moved to 27.2. The sources do not say which features or data paths are involved, so the exposure scope beyond the version is unknown.","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000574,"input_tokens":3256,"output_tokens":497,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-2026':13A,16A '-86987':14A,17A '27.2':78C,81C 'abl':53B,87C 'access':89C 'address':67C 'affect':61B 'appl':1A,19B 'apple-devic':18B 'attack':50B,84C 'author':5A,28B,64C 'check':29B,71C 'could':42B 'cve':12A,15A 'data':10A,44B,58B,92C 'devic':20B,62B 'entitl':70C 'expos':7A 'fix':75C 'flaw':6A 'fleet':26B 'improv':69C 'infrastructur':21B 'io':2A,22B,31B,77C 'ipado':4A,23B,33B,80C 'issu':65C,73C 'may':51B,85C 'miss':35B 'mobil':25B 'mobile-fleet':24B 'reach':43B 'read':55B 'remot':11A,49B,83C 'request':41B 'sensit':8A,56B,90C 'user':9A,57B,91C 'weak':38B","nicknames":[],"mitigations":[],"who_affected":"Owners of iPhone and iPad devices running iOS or iPadOS builds before 27.2. Managed fleets should confirm devices have moved to 27.2. The sources do not say which features or data paths are involved, so the exposure scope beyond the version is unknown.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-26T21:20:37+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-86987","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-86987","severity":null,"published_at":"2026-10-26T21:20:37+00:00","modified_at":"2026-10-26T21:20:37+00:00","first_seen_at":"2026-10-26T21:55:22+00:00","fetched_at":"2026-10-26T21:55:22+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}