CVE-2026-86886
Summary
| CVE | CVE-2026-86886 |
|---|---|
| State | PUBLISHED |
| Assigner | apple |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2026-09-14 21:17:39 UTC |
| Updated | 2026-09-14 21:17:39 UTC |
| Description | A path traversal issue was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, watchOS 27. An app may be able to modify protected system files. |
Risk And Classification
Problem Types: An app may be able to modify protected system files
Vendor Declared Affected Products
| Source | Vendor | Product | Version | Platforms |
|---|---|---|---|---|
| CNA | Apple | IOS And IPadOS | affected 26.7 custom | Not specified |
| CNA | Apple | IOS And IPadOS | affected 27 custom | Not specified |
| CNA | Apple | WatchOS | affected 27 custom | Not specified |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| support.apple.com/en-us/149037 | [email protected] | support.apple.com | |
| support.apple.com/en-us/149034 | [email protected] | support.apple.com | |
| support.apple.com/en-us/149041 | [email protected] | support.apple.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.