Bypass of Digital ID authentication on Apple devices due to iPhone Mirroring vulnerability
CVE-2026-84490

2LOW

Key Information:

Vendor

Apple
Status
iOS And iPad OS
Vendor
CVE Published:
20 October 2026

What is CVE-2026-84490?

An authentication bypass vulnerability has been identified in Apple’s iOS 27 and iPadOS 27. This issue allows attackers with physical access to a locked device to potentially bypass Digital ID authentication when the iPhone Mirroring feature is enabled. The flaw was addressed through improved state management to enhance the security of the affected systems.

Affected Version(s)

iOS and iPadOS 0 < 27

References

https://support.apple.com/en-us/149034

CVSS V3.1

Score:
2
Severity:
LOW
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Physical
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.