CVE-2026-86963: Input Validation
Published Oct 20, 2026
·Updated
A denial-of-service issue was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27. An attacker in a privileged network position may be able to cause a denial-of-service.
Affected Software
2 affected components
Apple iOS<26.7, <27
Apple iPadOS<26.7, <27
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
iOS and iPadOSto a version that resolves this vulnerability.Fixed in 26.7 - Upgrade
Upgrade
iOS and iPadOSto a version that resolves this vulnerability.Fixed in 27
Event History
Oct 20, 2026
CVE Published
via MITRE·12:50 AM
Data Sourced
via MITRE·12:50 AM
DescriptionWeakness
Data Sourced
via NVD·01:17 AM
Description
Frequently Asked Questions
1
Who is in a position to exploit this issue?
An attacker must be in a privileged network position to attempt exploitation.
2
Which releases contain the fix?
The issue is fixed in iOS 26.7, iPadOS 26.7, iOS 27, and iPadOS 27.
3
What is the impact of successful exploitation?
A privileged network attacker may be able to cause a denial of service.