PT-2026-61979
CVE-2025-68640
·
تاريخ النشر
2026-07-21
·
تاريخ التحديث
2026-10-12
الوصف من
CVSS 3.1
5.3
متوسطةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Apple Find My backend service versions prior to 2025-12-18
Description
The backend service allows an attacker with a valid Private Endpoint Token (PET) to enumerate devices and remove offline devices from an Apple ID account. This process bypasses two-factor authentication and ownership verification, potentially leading to the unauthorized removal of devices associated with the account.
Recommendations
Update the Apple Find My backend service to a version released after 2025-12-17.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾