CVE-2026-43674NVD

Vulnerability Summary

An authentication issue was addressed with improved state management. This issue is fixed in iOS 27 and iPadOS 27. An attacker with physical access to an unlocked device may be able to view Wi-Fi passwords without authentication.

Severity Level

UNKNOWN

Published Date

Sep 14, 2026

Last Modified

Sep 17, 2026

Exploitation Status

No confirmed exploitation yet

EPSS Score (30-Day)

0.22%Probability

Root Weakness (CWE)

N/A

Affected & Patched Versions

Affected Versions

Apple iOS and iPadOS < 27

Patched Versions

Apple iOS and iPadOS 27

📧Email Delivery — Threat intel straight to your inbox.

♾️Unlimited Vendors — Track your entire stack.

🚨All New CVEs — Be the first to know.

⚙️Custom EPSS — Filter noise, focus on risk.

💬Webhooks — Slack & Teams integration.

🚫Ad-Free — Uninterrupted experience.