CVE-2026-112612 — Vulnerability intelligence

apple — ipados

Published: 2026-10-26T21:17:53.890

CVSS

6.2

CISA KEV

Not listed; not proof of no exploitation

Original source text (not a translation)

A path handling issue was addressed with improved validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2. An attacker with physical access to a trust-paired device may be able to read and write arbitrary files.

Sources

• CVE-2026-112612
• Vendor Advisory
• Vendor Advisory