AirPlay Receiver Pairing Vulnerability in Apple iOS and iPadOS
CVE-2026-113971

Currently unrated

Key Information:

Vendor: Apple
Status: iOS And iPad OS
Vendor: CVE Published:; 9 November 2026

What is CVE-2026-113971?

This vulnerability enables an attacker with physical access to a locked Apple device to pair it with an AirPlay receiver. This unauthorized access was mitigated in the latest updates of iOS and iPadOS, which restrict the option to pair with AirPlay from the lock screen. Users should ensure their devices are updated to versions 18.7.12 or 26.5 to avoid potential security risks associated with this issue.

Affected Version(s)

iOS and iPadOS 0 < 18.7.12

iOS and iPadOS 0 < 26.5

References

https://support.apple.com/en-us/127110

https://support.apple.com/en-us/149717

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Nov 9, 2026
Vulnerability Reserved
Oct 20, 2026

CVE-2026-113971 Data

JSON