CVE-2026-86977: Apple iOS vulnerability
Published Oct 20, 2026
·Updated
An authorization issue was addressed with improved network restrictions. This issue is fixed in iOS 27 and iPadOS 27. An app may be able to initiate calls or send messages.
Affected Software
2 affected components
Apple iOS<27
Apple iPadOS<27
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
iOS/iPadOSto a version that resolves this vulnerability.Fixed in 27
Event History
Oct 20, 2026
CVE Published
via MITRE·12:50 AM
Data Sourced
via MITRE·12:50 AM
DescriptionWeakness
Frequently Asked Questions
1
What conditions are required for exploitation?
An app must be able to run on the affected device. The issue could allow that app to initiate calls or send messages.
2
Which devices or software versions are affected?
The provided information identifies iOS and iPadOS as affected and states that the issue is fixed in iOS 27 and iPadOS 27. It does not specify the vulnerable version range.
3
What is the mitigation if updating is not immediately possible?
No temporary mitigation is provided. The stated remediation is to update to iOS 27 or iPadOS 27.