Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2026-20655

An authorization issue was addressed with improved state management. This issue is fixed in iOS 26.3 and iPadOS 26.3, iOS 18.7.5 and iPadOS 18.7.5. An attacker with physical access to a locked device may be able to view sensitive user information.

Published

2026-02-11T23:16:08.330

Last Modified

2026-02-13T14:45:45.517

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 5.5 (MEDIUM)

Weaknesses
  • Type: Primary
    NVD-CWE-noinfo
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System apple ipados < 18.7.5 Yes
Operating System apple ipados < 26.3 Yes
Operating System apple iphone_os < 18.7.5 Yes
Operating System apple iphone_os < 26.3 Yes
References