CVE-2026-86890
A logic issue was addressed with improved checks. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27. An attacker with physical access to a locked device may be able to view sensitive user information.
- Published Sep 14, 2026
- CVSS 4.6 medium
- 0.2% chance of exploitation in the next 30 days (EPSS)
- A fix is available