CVE-2026-1139655.4Medium
CVE-2026-113965: Apple iOS and iPadOS vulnerability
Apple · iOS and iPadOS
Vendor fix available · Affected: Apple iOS and iPadOS · Exploitation: not established
ExploitationNot established
Not in CISA KEV as of catalogue 2026.11.09 (9 Nov)
- In CISA KEV: not seen
- Exploited (reported): not seen
- Scanning observed: not seen
- Proof of concept public: not seen
- Not establishedNothing in the sources we check
No EPSS score yet. The score appears once FIRST publishes it.
5.4MediumCVSS
LowMediumHighCrit.
DescriptionNVD
This issue was addressed with improved checks. This issue is fixed in iOS 18.7.12 and iPadOS 18.7.12, iOS 26.7.3 and iPadOS 26.7.3, iOS 27.2.1 and iPadOS 27.2.1, macOS Golden Gate 27.2.1, macOS Sequoia 15.8.3, macOS Tahoe 26.7.3, visionOS 27.2.1, watchOS 26.6.1, watchOS 27.2.1. A malicious Bluetooth device may be able to establish a pairing without user interaction.
Coverage1 article · 1 outlet
First in our coverage: SANS ISC, 10 Nov.
- Apple fixes nine flaws in November updates for its devicesSANS ISC · first in our coverage · mentions it in passing
New articles also arrive in the RSS feed.