CVEvulnerability
CVE-2026-20686
5.3 MEDIUM
Official page ↗
- Status
- Analyzed
- Published
- 2026-03-25
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 5.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
- Weaknesses
- CWE-20
Description
This issue was addressed with improved input validation. This issue is fixed in iOS 26.3 and iPadOS 26.3. An app may be able to access sensitive user data.
Affected configurations
• apple ipados (< 26.3)
• apple iphone os (< 26.3)
Related
Weakness · CWE (1)
- CWE-20 Improper Input Validation weakness
References
- https://support.apple.com/en-us/126346 Release Notes, Vendor Advisory