Apple iOS/iPadOS Vulnerabilities Allow Bypass, DoS, Info Disclosure

CERT-Bund has released security advisory WID-SEC-2026-0852 detailing multiple critical vulnerabilities (CVSS Base Score 8.3) affecting Apple iOS and iPadOS. The vulnerabilities allow remote attackers to bypass security controls, execute denial-of-service attacks, disclose sensitive information, and perform cross-site scripting attacks. Specific affected versions include Apple iOS versions prior to 26.4 and 18.7.7, and Apple iPadOS versions prior to 26.4 and 18.7.7.

Users and organizations utilizing affected Apple devices are strongly advised to update their operating systems to the latest available versions as soon as possible to mitigate these security risks. Failure to apply these updates could expose devices to compromise, potentially leading to data breaches or service disruptions. This advisory highlights the ongoing need for prompt patching of software vulnerabilities to maintain device security.