Description
A path traversal issue was addressed with improved path validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27. An attacker with physical access to a trust-paired device may be able to read and write arbitrary files.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Apple | iOS and iPadOS | < 26.7, < 27 | 26.7 |
Advisories 2
- WID-SEC-2026-3352 Apple iOS, iPadOS, macOS Tahoe, macOS Golden Gate, macOS Sequoia und Safari: Mehrere Schwachstellen BSI CERT-Bund (WID) · Oct 26, 2026
- NCSC-2026-0370 Kwetsbaarheden verholpen in Apple iOS en iPadOS NCSC-NL (Netherlands) · Sep 15, 2026