CVSS 6.2 (medium) · published 2026-10-26
A path handling issue was addressed with improved validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2. An attacker with physical access to a trust-paired device may be able to read and write arbitrary files.
Affected products (NVD): apple ipados, apple iphone_os
Fixed in (NVD): 26.7.2, 27.2
Weakness: CWE-22
Source: NVD CVE-2026-112612
Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.