Authorization Flaw in Apple iOS and iPadOS Products
CVE-2026-86987

Currently unrated

Key Information:

Vendor

Apple
Status
iOS And iPad OS
Vendor
CVE Published:
26 October 2026

What is CVE-2026-86987?

An authorization flaw has been identified in Apple iOS and iPadOS that could allow a remote attacker to access sensitive user data. Enhanced entitlement checks have been implemented to address this issue, which affects iOS 27.1 and earlier versions. It is crucial for users to update to iOS 27.2 or iPadOS 27.2 to mitigate the risk associated with this vulnerability.

Affected Version(s)

iOS and iPadOS 0 < 27.2

References

https://support.apple.com/en-us/149230

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.