Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
4.7
CVE-2026-43811: iOS and iPadOS File System Protection Bypass
CVE-2026-43811 · published 3 months ago
Summary
A security issue in iOS and iPadOS allowed an app to potentially modify parts of the file system it shouldn't be able to. This has been fixed in iOS 26.6 and iPadOS 26.6. Update your devices to the latest version to ensure you have this fix.
What to do
- Update apple ipados to version 26.6 or later.
- Update apple iphone_os to version 26.6 or later.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| apple | ios and ipados |
< 26.6 < 18.7.10 |
| apple | ipados |
< 26.6 cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:* |
| apple | iphone_os |
< 26.6 cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:* |
Original advisory text
A race condition was addressed with improved checks. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6. An app may be able to modify protected parts of the file system.
A race condition was addressed with improved checks. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6. An app may be able to modify protected parts of the file system.
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit
- Gives an attacker partial control
Severity
4.7
Medium
Type
CWE-362Race Condition
Timeline
Published27 Jul 2026
Updated26 Oct 2026
First seen27 Jul 2026
Track software like this
Free during beta