CVE-2026-86989

Full vulnerability record from the local CVENow database.

Description

An authorization issue was addressed with improved state management. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2. An app may be able to fingerprint the user.

Severity

Not scored

CVSS score

Not available

Vulnerability status

Undergoing Analysis

Source identifier

[email protected]

Published

2026-10-26 21:20:37.723000

Last modified

2026-10-27 14:52:57.863000

View original CVE JSON

{
  "id": "CVE-2026-86989",
  "sourceIdentifier": "[email protected]",
  "published": "2026-10-26T21:20:37.723",
  "lastModified": "2026-10-27T14:52:57.863",
  "vulnStatus": "Undergoing Analysis",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "An authorization issue was addressed with improved state management. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2. An app may be able to fingerprint the user."
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "Apple",
          "product": "iOS and iPadOS",
          "versions": [
            {
              "version": "0",
              "lessThan": "26.7.2",
              "versionType": "custom",
              "status": "affected"
            },
            {
              "version": "0",
              "lessThan": "27.2",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {},
  "references": [
    {
      "url": "https://support.apple.com/en-us/149227",
      "source": "[email protected]"
    },
    {
      "url": "https://support.apple.com/en-us/149230",
      "source": "[email protected]"
    }
  ]
}