CVE-2026-86895
An information disclosure issue was addressed with improved state management. This issue is fixed in iOS 27 and iPadOS 27, tvOS 27, visionOS 27, watchOS 27. A local app may be able to read a persistent account identifier.
- Published Sep 14, 2026
- CVSS 7.5 high
- 0.5% chance of exploitation in the next 30 days (EPSS)
- A fix is available