Description
An input validation issue was addressed with improved input validation. This issue is fixed in iOS 27 and iPadOS 27. An attacker in radio range may be able to cause unexpected system termination.
Published: 2026-09-14
Score: n/a
EPSS: n/a
KEV: No
Impact: Denial of Service (unexpected system termination)
Action: Apply Patch
AI Analysis

Impact

The vulnerability involves an input validation flaw in Apple iOS and iPadOS that can be triggered by a malicious actor within radio range. When exploited, the flaw can lead to unexpected system termination, effectively causing a denial‑of‑service condition on the affected device.

Affected Systems

Apple iOS and iPadOS systems prior to release of version 27 are affected. The flaw is fixed in iOS 27 and iPadOS 27.

Risk and Exploitability

Because the issue is tied to a radio‑based attack vector and no exploit probability data is available, the exact likelihood of exploitation is uncertain. exploit and the fact that the vulnerability is mitigated in the latest releases mean the risk is primarily confined to devices that have not yet been updated. For unpatched devices, an attacker in close proximity could force the system to crash, disrupting services and potentially allowing further attack steps if service disruption is critical.

Generated by OpenCVE AI on September 15, 2026 at 08:02 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Update the device to iOS 27 or iPadOS 27, the version that contains the fix for this input validation issue.
  • Turn off or restrict wireless interfaces such as Bluetooth, Wi‑Fi, and mobile data when the device is near potential attackers.
  • Configure automatic background updates in the device settings so that future security patches are applied promptly.

Generated by OpenCVE AI on September 15, 2026 at 08:02 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

References
History

Tue, 15 Sep 2026 08:30:00 +0000

Type Values Removed Values Added
Title Input Validation Issue Allows Remote Attacker to Cause System Termination on iOS/iPadOS
Weaknesses CWE-20

Tue, 15 Sep 2026 03:30:00 +0000

Type Values Removed Values Added
First Time appeared Apple
Apple ios And Ipados
Vendors & Products Apple
Apple ios And Ipados

Mon, 14 Sep 2026 21:00:00 +0000

Type Values Removed Values Added
Description An input validation issue was addressed with improved input validation. This issue is fixed in iOS 27 and iPadOS 27. An attacker in radio range may be able to cause unexpected system termination.
References

Subscriptions

Apple Ios And Ipados
cve-icon MITRE

Status: PUBLISHED

Assigner: apple

Published:

Updated: 2026-09-14T20:50:45.891Z

Reserved: 2026-09-08T16:43:41.871Z

Link: CVE-2026-86885

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-09-14T21:17:39.447

Modified: 2026-09-14T21:17:39.447

Link: CVE-2026-86885

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-09-15T08:15:13Z

Weaknesses
  • CWE-20

    Improper Input Validation