November 13, 2026

CVE Watchtower

CVE-2026-113971Apple iOS and iPadOS

NVD

Vulnerability Summary

This issue was addressed by restricting options offered on a locked device. This issue is fixed in iOS 18.7.12 and iPadOS 18.7.12, iOS 26.5 and iPadOS 26.5. An attacker with physical access may be able to pair a device with an AirPlay receiver from the lock screen.
Severity Level
LOW(3.5)
Published Date
Nov 9, 2026
Last Modified
Nov 9, 2026
Exploitation Status
No confirmed exploitation yet
EPSS Score (30-Day)
0.16%Probability
Root Weakness (CWE)
N/A
CVSS v3.0 Base Metrics — Score 3.5 (LOW)
CVSS:3.0

Affected & Patched Versions

Affected Versions
  • Apple iOS and iPadOS < 18.7.12
  • Apple iOS and iPadOS < 26.5
Patched Versions
  • Apple iOS and iPadOS 18.7.12
  • Apple iOS and iPadOS 26.5

What to do

Fix it during your normal patch cycle. No exploitation is confirmed yet.

  1. Check whether you run Apple iOS and iPadOS and which version.
  2. Update to a patched version listed above, then confirm the new version.

Timeline

  • Nov 9, 2026Published
  • Nov 9, 2026Record last modified

Score, severity and exploitation changes are tracked from the day Watchtower started logging them.

Get notified about new Apple CVEsYou are reading CVE-2026-113971. Get an email when KEV listings, exploits or new CVEs match your stack.
Notify me about Apple CVEs

External References

Data last checked: Nov 13, 2026 18:08 UTC