Update iOS: 27.2.1 closes a hole attackers already use

critical severity · exploited in the wild · published 2026-11-09

Attackers already use this flaw (CVE-2026-111497) against iPhones and iPads. A device that has not installed the update stays open to it.

Fixed in: 27.2.1

CVE: CVE-2026-105482, CVE-2026-105483, CVE-2026-106069, CVE-2026-111497

Source: GitHub Advisory

Get the fix

Fixlane has a reviewed fix procedure for this incident: a read-only check first, then the fix. Ask the Telegram bot, or connect an AI agent to the Fixlane MCP server and call get_fix_prompt with incident id 11 and your operating system.