MEDIUM

CVE-2026-86886

Apple Ipados 2026-09-14 CVSS v3.1

CVSS

5.5

Description

A path traversal issue was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, watchOS 27. An app may be able to modify protected system files.

Weakness (CWE)

CWE-22 Path Traversal

EPSS Score

0.14%

Probability of exploitation in next 30 days

3.3th percentile

References

https://support.apple.com/en-us/149034 Vendor Advisory https://support.apple.com/en-us/149037 Vendor Advisory https://support.apple.com/en-us/149041 Vendor Advisory

View on dbcve.org

Base CVE data derived from NVD (public domain). Enrichment by dbcve.org (CC-BY-4.0). Fetched via API.

Back to CVE