Bluetooth Pairing Bypass Vulnerability in Apple Products
CVE-2026-113964

Currently unrated

Key Information:

Vendor: Apple
Status: iOS And iPad OS; Mac OS; Visionos; Watch OS
Vendor: CVE Published:; 9 November 2026

What is CVE-2026-113964?

A logic issue related to Bluetooth pairing security has been identified in several Apple operating systems. The vulnerability allows an attacker within Bluetooth range to circumvent the rate limiting on pairing code attempts, potentially allowing them to pair with a device without user consent. This highlights the importance of implementing robust state management in Bluetooth interactions to safeguard user devices. Apple has addressed this issue in recent updates for affected operating systems.

Affected Version(s)

iOS and iPadOS 0 < 18.7.12

iOS and iPadOS 0 < 26.7.3

iOS and iPadOS 0 < 27.2.1

References

https://support.apple.com/en-us/149715

https://support.apple.com/en-us/149716

https://support.apple.com/en-us/149717

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Nov 9, 2026
Vulnerability Reserved
Oct 20, 2026

CVE-2026-113964 Data

JSON