VulnerabilityAwaiting Analysis

CVE-2026-84493

A malicious app may be able to access Bluetooth without user consent.

UnscoredEPSS —

Does this matter?

Not yet scored. NVD analysis is pending; check back once CVSS and EPSS values are published.

Description

An authentication issue was addressed with improved state management. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2. A malicious app may be able to access Bluetooth without user consent.

CVSS: Not yet scored
EPSS: No score yet
Public exploits: None in Exploit-DB
CISA KEV: Not listed
Source: product-security@apple.com

References

https://support.apple.com/en-us/149227
https://support.apple.com/en-us/149230

Source: NVD record, EPSS from FIRST.org, KEV from CISA, exploits from Exploit-DB. Refreshed daily. Download this record as JSON.