CVE-2026-86885

Analyzed Analyzed - Analysis Complete

Unexpected System Termination in iOS and iPadOS

Publication date: 2026-09-14

Last updated on: 2026-09-16

Assigner: Apple Inc.

Description

An input validation issue was addressed with improved input validation. This issue is fixed in iOS 27 and iPadOS 27. An attacker in radio range may be able to cause unexpected system termination.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-14

Last Modified

2026-09-16

Generated

2026-10-05

AI Q&A

2026-09-15

EPSS Evaluated

2026-10-03

NVD

CVE-2026-86885

Affected Vendors & Products

Vendor	Product	Version / Range
apple	ipados	to 27.0 (exc)
apple	iphone_os	to 27.0 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-20	The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

Attack-Flow Graph

Executive Summary

This vulnerability is an input validation issue in iOS 27 and iPadOS 27. It could allow an attacker within radio range to cause an unexpected system termination.

Detection Guidance

This vulnerability is specific to iOS 27 and iPadOS 27 and involves an input validation issue that may cause unexpected system termination. Detection would require checking the iOS or iPadOS version on affected devices. Commands like 'sw_vers' on macOS or checking 'Settings > General > About' on iOS devices can verify the OS version.

Impact Analysis

The impact is limited to unexpected system termination, which could disrupt device functionality temporarily.

Compliance Impact

The provided CVE data does not specify any direct impact on compliance with standards like GDPR or HIPAA. The vulnerability involves an input validation issue causing unexpected system termination, but no details are given about data exposure or regulatory implications.

Mitigation Strategies

Update affected devices to iOS 27 or iPadOS 27 or later versions to address the input validation issue.

Hi! I’m here to help you understand CVE-2026-86885. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70