Advisoriesby IbisAppleCVE-2026-65329
Apple iOS and iPadOS: improper authentication
Fix: upgrade to 26.6.1 or later (2 fixed versions below)
An authentication issue was addressed with improved state management. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, iOS 27 and iPadOS 27. An attacker in a privileged network position may be able to bypass IPSec authentication and intercept network traffic.
Affected versions
| Package | Affected | Fixed in |
|---|---|---|
| iOS and iPadOS Product | < 26.6.1 | 26.6.1 |
| < 27 | 27 |
Details and references
- CVSS 3.1
- CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N
- Severity from
- CISA (its enrichment of the CVE record)
- Weakness
- CWE-287