VulnerabilityAwaiting Analysis

CVE-2026-112612

An attacker with physical access to a trust-paired device may be able to read and write arbitrary files.

UnscoredEPSS —

Does this matter?

Not yet scored. NVD analysis is pending; check back once CVSS and EPSS values are published.

Description

A path handling issue was addressed with improved validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2. An attacker with physical access to a trust-paired device may be able to read and write arbitrary files.

CVSS: Not yet scored
EPSS: No score yet
Public exploits: None in Exploit-DB
CISA KEV: Not listed
Source: product-security@apple.com

References

https://support.apple.com/en-us/149227
https://support.apple.com/en-us/149230

Source: NVD record, EPSS from FIRST.org, KEV from CISA, exploits from Exploit-DB. Refreshed daily. Download this record as JSON.