CVE-2026-112595

Severity: unknown
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-10-26 · updated 2026-10-27

Description

This issue was addressed with improved authentication. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2. An attacker in physical proximity may be able to craft malicious network traffic to gain access to a Thread network.

Affected products

Apple iOS and iPadOS: before 27.2 — fixed in 27.2
Apple macOS: before 27.2 — fixed in 27.2
Apple tvOS: before 27.2 — fixed in 27.2

How to fix

Upgrade to a fixed version: Apple iOS and iPadOS 27.2; Apple macOS 27.2; Apple tvOS 27.2. Check the vendor advisory for mitigations.

References

https://support.apple.com/en-us/149230
https://support.apple.com/en-us/149521
https://support.apple.com/en-us/149524

Get alerted when CVE-2026-112595 or the next vulnerability affects your stack