Denial-of-Service Vulnerability in Apple's iOS and iPadOS
CVE-2026-86963

5.9MEDIUM

Key Information:

Vendor

Apple
Status
iOS And iPad OS
Vendor
CVE Published:
20 October 2026

What is CVE-2026-86963?

A denial-of-service vulnerability has been identified in Apple's iOS and iPadOS products, wherein attackers in a privileged network position might exploit flawed input validation mechanisms. This could lead to disruptions in service, impacting device performance and user access. Users are encouraged to update to the latest versions, iOS 26.7, iPadOS 26.7, iOS 27, and iPadOS 27, to mitigate this risk.

Affected Version(s)

iOS and iPadOS 0 < 26.7

iOS and iPadOS 0 < 27

References

https://support.apple.com/en-us/149034
https://support.apple.com/en-us/149041

CVSS V3.1

Score:
5.9
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.