CVSS 4.4 (medium) · published 2026-10-26
An authentication issue was addressed with improved state management. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2. A malicious app may be able to access Bluetooth without user consent.
Affected products (NVD): apple ipados, apple iphone_os
Fixed in (NVD): 26.7.2
Weakness: CWE-306
Source: NVD CVE-2026-84493
Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.