Logic Issue in Apple iOS, macOS, and watchOS Products
CVE-2026-113968

Currently unrated

Key Information:

Vendor: Apple
Status: iOS And iPad OS; Mac OS; Visionos; Watch OS
Vendor: CVE Published:; 9 November 2026

What is CVE-2026-113968?

A logic issue in several Apple operating systems could allow an attacker within Bluetooth range to bypass the rate limiting on pairing code attempts, potentially enabling unauthorized access to devices. The issue has been resolved in the latest versions of iOS, iPadOS, macOS, and watchOS.

Affected Version(s)

iOS and iPadOS 0 < 18.7.12

iOS and iPadOS 0 < 26.7.3

iOS and iPadOS 0 < 27.2.1

References

https://support.apple.com/en-us/149715

https://support.apple.com/en-us/149716

https://support.apple.com/en-us/149717

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Nov 9, 2026
Vulnerability Reserved
Oct 20, 2026

CVE-2026-113968 Data

JSON