CVE-2026-43674 in iOS

Riassunto

di MITRE • 14/09/2026

An authentication issue was addressed with improved state management. This issue is fixed in iOS 27 and iPadOS 27. An attacker with physical access to an unlocked device may be able to view Wi-Fi passwords without authentication.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• Responsabile: Apple
• Prenotare: 02/05/2026
• Divulgazione: 14/09/2026
• Moderazione: accettato
• Voce: VDB-403766
• CPE: pronto
• CWE: CWE-287 (confermato)
• CVSS: 3.3 (VulDB)
• EPSS: 0.00000
• KEV: no
• Attività: molto basso
• Settore: Lawfirm, Homeoffice, ...

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-43674
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-43674
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-43674/