Logic Issue in AirPlay on Apple Products
CVE-2026-113969

Currently unrated

Key Information:

Vendor: Apple
Status: iOS And iPad OS; Mac OS; Visionos; Watch OS
Vendor: CVE Published:; 9 November 2026

What is CVE-2026-113969?

A logic issue in AirPlay's pairing code mechanism allows an attacker on the same network to potentially bypass rate limits on code entry attempts, posing significant security risks. Apple has resolved this issue in several software updates, strengthening state management protocols to mitigate future exploitation. Users are advised to update their devices to the latest versions to ensure optimal security.

Affected Version(s)

iOS and iPadOS 0 < 18.7.12

iOS and iPadOS 0 < 26.7.3

iOS and iPadOS 0 < 27.2.1

References

https://support.apple.com/en-us/149715

https://support.apple.com/en-us/149716

https://support.apple.com/en-us/149717

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Nov 9, 2026
Vulnerability Reserved
Oct 20, 2026

CVE-2026-113969 Data

JSON