Authorization Flaw in Apple iMessage and Other Products
CVE-2026-113961

Currently unrated

Key Information:

Vendor: Apple
Status: iOS And iPad OS; Mac OS; Visionos; Watch OS
Vendor: CVE Published:; 9 November 2026

What is CVE-2026-113961?

An authorization flaw in Apple’s iMessage and related products allows a remote attacker to potentially join group chats without permission, exposing sensitive messages. This vulnerability has been addressed with improved validation in the latest software updates across multiple platforms, including iOS, iPadOS, and macOS. Users are strongly encouraged to update their devices to ensure they are protected against unauthorized access.

Affected Version(s)

iOS and iPadOS 0 < 26.7.3

iOS and iPadOS 0 < 27.2.1

macOS 0 < 15.8.3

References

https://support.apple.com/en-us/149715

https://support.apple.com/en-us/149716

https://support.apple.com/en-us/149718

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Nov 9, 2026
Vulnerability Reserved
Oct 20, 2026

CVE-2026-113961 Data

JSON